last executing test programs: 2m25.637280637s ago: executing program 2 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x40, 0x1, 0x7e1, 0x3867, {{0x5f, 0x4, 0x0, 0x5, 0x17c, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x58, 0xfffffffffffffffe, [{0x7, 0xc, "f9271a21ac3e68473e6d"}, {0x0, 0x7, "efe0f51632"}, {0x1, 0x11, "aeef1b8e33a6f1c58fabe40fd4da54"}, {0x5, 0xd, "c97653ab7ab967a25a6481"}, {0x1, 0x12, "776ead525f173a578a87bc5f308300b4"}, {0x0, 0xf, "28947818ed6936b553ae82e091"}]}, @cipso={0x86, 0x28, 0x1, [{0x1, 0xe, "20ba51fb2c00fc5e054b2d0e"}, {0x5, 0xf, "c5bccb2290f427244e59a62b0b"}, {0x5, 0x5, "0e8ae3"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x8d, 0x3, 0x0, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x3}, {@multicast1}, {@rand_addr=0x64010101, 0x5}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@rand_addr=0x64010100, 0x7f}]}, @cipso={0x86, 0x3b, 0x0, [{0x1, 0x10, "ae416e654017bb39586b1fe39626"}, {0x7, 0x8, "d816166ec79d"}, {0x2, 0x2}, {0x7, 0x11, "d0c47f9bc0f7eb51a885dfae3380d9"}, {0x0, 0xa, "91e89fbeca9a2e7a"}]}, @timestamp_prespec={0x44, 0x34, 0x1a, 0x3, 0x0, [{@empty, 0x9}, {@private=0xa010102, 0x7}, {@remote, 0x32}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x658}, {@loopback, 0x1}]}, @ssrr={0x89, 0x13, 0xd6, [@loopback, @multicast1, @local, @local]}, @timestamp_addr={0x44, 0x24, 0x70, 0x1, 0x0, [{@remote, 0xe86}, {@broadcast, 0xb80}, {@multicast2, 0x2}, {@remote, 0x401}]}, @end]}}}}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffd, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000090603000000000000000000050000400900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c00018008000140e00040000c00148008000140ffffffff644b9d9955327a9fcbf8b8b8c08648680d3eedcfd5ca73b4b1d994e3b7a57742aab2ef204f9984b35fccc27225b173e6ff930f8706af3fc76b538df37d097f57b91f057254c348f571edb0d67cb1c308f72772ddb5f1d3dfe3d5080018fa0906066ab731286dabce87f83a09a0f555e7c057acdcd382802a696e140fa294b831245b684b37e38cb880cbed"], 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') 2m24.773398495s ago: executing program 2 (id=267): openat$nullb(0xffffffffffffff9c, 0x0, 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)) socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdir(0x0, 0xb4) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x4000, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r3 = userfaultfd(0x80001) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r5, 0x0, 0x22, 0x0, &(0x7f00000007c0)) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) (async) syz_usb_ep_write(r4, 0x81, 0x2, &(0x7f0000000080)="4005") ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) (async) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5df}}, 0xc1d, 0x0, 0x3fc, 0x0, 0x36, 0x0, 0x4}, 0x9c) 2m24.618701229s ago: executing program 2 (id=269): mmap(&(0x7f000069d000/0x4000)=nil, 0x4000, 0x1000003, 0x4000010, 0xffffffffffffffff, 0xffffe000) (async) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) (async) mkdir(&(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/xhci-hcd/xhci_handle_port_status/inject\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='busnum=1 portnum=2 portsc=0xfffffffe\n\x00', 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/trace\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f00000000c0)={'wlan1\x00', @random="ec44670a00"}) (async, rerun: 64) read(r1, &(0x7f0000000600), 0x1000) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m24.569416992s ago: executing program 2 (id=270): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40f40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x84003) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (rerun: 32) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x10, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x20000005, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xd7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) setresuid(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48e, 0x0, 0xfff9fffe04006172}]}) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYBLOB="32656fbfc1667717ae008e11a7a67b74a5f8e8aca5bd1d9c", @ANYRESOCT=r1], 0x13c}}, 0x24000000) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000012"], 0x94}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f060}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3ff}, @IFLA_MAP={0x24, 0xe, {0x32, 0x7fffffffffffffff, 0x4, 0x0, 0x0, 0xdb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) 2m24.325578101s ago: executing program 2 (id=272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x6, 0xe}, {0xfff3, 0xf}}}, 0x24}}, 0x20) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='file0\x00', 0x6) syz_usb_connect(0x2, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x2, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2m23.355850826s ago: executing program 2 (id=279): socket(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0xfffffffa}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0xfffffffa}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000580)=0x7, r3, 0x0, 0x0, 0x1}}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x12, 0x2, 0x2, 0x9, 0x0, 0xc95]}, &(0x7f00000001c0)=0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) syz_open_pts(r6, 0x800) (async) syz_open_pts(r6, 0x800) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc89}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f1861b06a3b33be65af3c01ac17ac302516971b3c7c3dd526077140"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b720d28ce744acd1a6042391533faf73916eb616a2cd01f2a3880e2cc1869eae09"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc89}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f1861b06a3b33be65af3c01ac17ac302516971b3c7c3dd526077140"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b720d28ce744acd1a6042391533faf73916eb616a2cd01f2a3880e2cc1869eae09"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0xa7, 0x7, 0x1, 0x7, 0x7f, 0x8, 0x5, 0xd1, 0x9, 0x5, 0x6, 0xf7, 0xff, 0x3, 0x5, 0x9}}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xa000, 0x9, 0x8, 0x8001, 0x0, [{0x2, 0x5, 0x0, '\x00', 0x5}, {0x5, 0xf8, 0x0, '\x00', 0xe}, {0x8, 0x80, 0x4}, {0x7, 0x3, 0x5c, '\x00', 0x5}, {0x7a, 0x4, 0x8, '\x00', 0xbf}, {0x3, 0xa, 0x0, '\x00', 0x9}, {0x0, 0x3, 0x0, '\x00', 0x2}, {0x7b, 0x9, 0x8, '\x00', 0x7}, {0x58, 0x8, 0x3, '\x00', 0x2}, {0x2, 0xb1, 0x4, '\x00', 0x1}, {0x0, 0x15, 0x8, '\x00', 0x5}, {0x5, 0x6, 0x4, '\x00', 0xc}, {0x7, 0x2, 0x1, '\x00', 0x3}, {0x7, 0x3, 0x1}, {0x16, 0xff, 0x6, '\x00', 0x1}, {0x9, 0x4, 0x2, '\x00', 0x5}, {0x57, 0x7, 0x6, '\x00', 0xfd}, {0x9, 0xff, 0x5, '\x00', 0x6}, {0x7, 0x7f, 0xc2, '\x00', 0x4}, {0x7, 0x4, 0x80, '\x00', 0x7}, {0xe, 0x4, 0x1, '\x00', 0x1}, {0x6a, 0x5, 0x8, '\x00', 0x5}, {0x5, 0x4, 0x7, '\x00', 0xc4}, {0x3, 0x1, 0xb, '\x00', 0x81}]}}) (async) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xa000, 0x9, 0x8, 0x8001, 0x0, [{0x2, 0x5, 0x0, '\x00', 0x5}, {0x5, 0xf8, 0x0, '\x00', 0xe}, {0x8, 0x80, 0x4}, {0x7, 0x3, 0x5c, '\x00', 0x5}, {0x7a, 0x4, 0x8, '\x00', 0xbf}, {0x3, 0xa, 0x0, '\x00', 0x9}, {0x0, 0x3, 0x0, '\x00', 0x2}, {0x7b, 0x9, 0x8, '\x00', 0x7}, {0x58, 0x8, 0x3, '\x00', 0x2}, {0x2, 0xb1, 0x4, '\x00', 0x1}, {0x0, 0x15, 0x8, '\x00', 0x5}, {0x5, 0x6, 0x4, '\x00', 0xc}, {0x7, 0x2, 0x1, '\x00', 0x3}, {0x7, 0x3, 0x1}, {0x16, 0xff, 0x6, '\x00', 0x1}, {0x9, 0x4, 0x2, '\x00', 0x5}, {0x57, 0x7, 0x6, '\x00', 0xfd}, {0x9, 0xff, 0x5, '\x00', 0x6}, {0x7, 0x7f, 0xc2, '\x00', 0x4}, {0x7, 0x4, 0x80, '\x00', 0x7}, {0xe, 0x4, 0x1, '\x00', 0x1}, {0x6a, 0x5, 0x8, '\x00', 0x5}, {0x5, 0x4, 0x7, '\x00', 0xc4}, {0x3, 0x1, 0xb, '\x00', 0x81}]}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2m7.724505031s ago: executing program 32 (id=279): socket(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0xfffffffa}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0xfffffffa}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000580)=0x7, r3, 0x0, 0x0, 0x1}}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x12, 0x2, 0x2, 0x9, 0x0, 0xc95]}, &(0x7f00000001c0)=0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) syz_open_pts(r6, 0x800) (async) syz_open_pts(r6, 0x800) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc89}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f1861b06a3b33be65af3c01ac17ac302516971b3c7c3dd526077140"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b720d28ce744acd1a6042391533faf73916eb616a2cd01f2a3880e2cc1869eae09"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x1c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc89}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7f1861b06a3b33be65af3c01ac17ac302516971b3c7c3dd526077140"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b720d28ce744acd1a6042391533faf73916eb616a2cd01f2a3880e2cc1869eae09"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0xa7, 0x7, 0x1, 0x7, 0x7f, 0x8, 0x5, 0xd1, 0x9, 0x5, 0x6, 0xf7, 0xff, 0x3, 0x5, 0x9}}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xa000, 0x9, 0x8, 0x8001, 0x0, [{0x2, 0x5, 0x0, '\x00', 0x5}, {0x5, 0xf8, 0x0, '\x00', 0xe}, {0x8, 0x80, 0x4}, {0x7, 0x3, 0x5c, '\x00', 0x5}, {0x7a, 0x4, 0x8, '\x00', 0xbf}, {0x3, 0xa, 0x0, '\x00', 0x9}, {0x0, 0x3, 0x0, '\x00', 0x2}, {0x7b, 0x9, 0x8, '\x00', 0x7}, {0x58, 0x8, 0x3, '\x00', 0x2}, {0x2, 0xb1, 0x4, '\x00', 0x1}, {0x0, 0x15, 0x8, '\x00', 0x5}, {0x5, 0x6, 0x4, '\x00', 0xc}, {0x7, 0x2, 0x1, '\x00', 0x3}, {0x7, 0x3, 0x1}, {0x16, 0xff, 0x6, '\x00', 0x1}, {0x9, 0x4, 0x2, '\x00', 0x5}, {0x57, 0x7, 0x6, '\x00', 0xfd}, {0x9, 0xff, 0x5, '\x00', 0x6}, {0x7, 0x7f, 0xc2, '\x00', 0x4}, {0x7, 0x4, 0x80, '\x00', 0x7}, {0xe, 0x4, 0x1, '\x00', 0x1}, {0x6a, 0x5, 0x8, '\x00', 0x5}, {0x5, 0x4, 0x7, '\x00', 0xc4}, {0x3, 0x1, 0xb, '\x00', 0x81}]}}) (async) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xa000, 0x9, 0x8, 0x8001, 0x0, [{0x2, 0x5, 0x0, '\x00', 0x5}, {0x5, 0xf8, 0x0, '\x00', 0xe}, {0x8, 0x80, 0x4}, {0x7, 0x3, 0x5c, '\x00', 0x5}, {0x7a, 0x4, 0x8, '\x00', 0xbf}, {0x3, 0xa, 0x0, '\x00', 0x9}, {0x0, 0x3, 0x0, '\x00', 0x2}, {0x7b, 0x9, 0x8, '\x00', 0x7}, {0x58, 0x8, 0x3, '\x00', 0x2}, {0x2, 0xb1, 0x4, '\x00', 0x1}, {0x0, 0x15, 0x8, '\x00', 0x5}, {0x5, 0x6, 0x4, '\x00', 0xc}, {0x7, 0x2, 0x1, '\x00', 0x3}, {0x7, 0x3, 0x1}, {0x16, 0xff, 0x6, '\x00', 0x1}, {0x9, 0x4, 0x2, '\x00', 0x5}, {0x57, 0x7, 0x6, '\x00', 0xfd}, {0x9, 0xff, 0x5, '\x00', 0x6}, {0x7, 0x7f, 0xc2, '\x00', 0x4}, {0x7, 0x4, 0x80, '\x00', 0x7}, {0xe, 0x4, 0x1, '\x00', 0x1}, {0x6a, 0x5, 0x8, '\x00', 0x5}, {0x5, 0x4, 0x7, '\x00', 0xc4}, {0x3, 0x1, 0xb, '\x00', 0x81}]}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 18.76465377s ago: executing program 1 (id=797): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='usb_gadget/g1/UDC\x00', 0x2, 0x0) sendto(r0, &(0x7f0000000240)="1d7d49c1fea43457cf58ba482862308b8c624a104e96141ea6f5f2a2de8cdb253a5afbbe3a1b717a8c46a38152a92c8a2cdf9b1dbb5d57e325ce521cd7659b2df404aa9bb1824e015c307f6c86a97344f1c0f7e545a2b31c729583f4cd79a12345df3ce4f2aaed9b9ccd3f1af7b21a1c9bf898a032205775a52750c586e5f67cbd9402dcbc489c86955807217916522a664868e68f3199e9a3bba8e923a70b6b825205095e19f6dfc5de497edc9044def79111b39e9a9bebfb6869a7cc00ca07d638e116de8a3d196233669faa9ba7e9d002583ae4981c1b77c568961126b917a6b8348abaa0da84f1742e7855f978f8075aa9cd00c81195a422c6dcebd4c746076ef24b237961979e8a939a4ecfc9be6de65cf3ede88b29356cd8532f0c377a2d9830b1601062d6b6bc2e6f9e681f668796903103116e28d55eaaa16a1602009223a44e29e75696d8892a92a437ec7ccb83e0e7528fe3c429a5a63af99bd5197e404052d73c7ce3c087279f35e286989d634e66c66c870ac2ca18230aaaccb790c148c35260596a57ccd7acbcf0a879aa5e8f9bf4e9a134ab28db1433cf04712f1c67c6895882ececc176b0eb13ea568e3b07d34c476d790712c4b37a5ad66a32cc0761860f1026774b560215ebde225a59a0e8c346529fb8d7fb0ce6d0c64766c82b3e2a821d3a3a6dd2ae5a4cc47fe48e3fb73e70bbfb5d0d52a9854d5e71e1248eacd833ded8a889e7a9ef4569000827fa7bad41f2c7131c4145dea5c71439f17cef1ebf3445783b8116cb3963af95f54f5cf020f91f732f913f1af88d83e60c005fe60e6f27527a0fec1336074c0d6d01d9ffb33790a31026d02a6c4709f91444de8c87e7b31de4eecf9d2a26617bc8518ee9eb5a22d8b22a052c1007c1f39922898138e61450664b6bcc3735f9972bdf0420aa437f38a9e9ae11571e9d7e55fa401e43eafe642a9562bea614f6312602ac683d75f4816fb544298d362f35ca1ff97d3ae20a47462cbc6694777262cb6d3982de84b54dc711dce80b689bb75d365c3160cde7f7bff9742239fa2c90ceaebb6fc36cc0f6e357f65566b747d1e9979ed1345081daa68c2e39ca2c5503f2d82c46731ed9401130b4aab94d4038ea3dd805eb5a54fa79bcebe1858f9716922b61883bdbac0ae1d1923c85510968ca7f0afdcaa5eb93a2a7e63893f094de90da0127f7a3134a1857fac1da7d0fbaffb82552604ad61a37ab749ff32ab4f0560732c717b01d1ff5381ddcd5a554faac79b19f4bc111de0622c86e4b778f5883ca269aef60bc73fb08b581ce38c81d3b7a09eb76401c08633c8de6fdd3e9215e3c4cd0020714a40b658ffd93c092367179d9e9e520357ca80fea26b026d4938431e6660544a5d45f6a3766324c0734ab8ec09adc48db812473cdcd918513f947f82b45d2947810d3d32d4327aa2a49f7943813f2af58826d9342093fbc4582d9bde4e53eae57939f59078910345e220a545e3b569a96259614459f88dca89ad8d2011f578a122cf686a2bca7cdf55f42d056e3a576151add8f2cde01043697a881be7ab9c602f9e64c2d349604d2b96c3cb23406d04c9d32c246402bdb8536b47a666645275df25c7c8a1a670764a66c4526f2fc5d2958a10b04573f853a49490969d2996a354070463cc1fbcf5d9c58e2b1340917b23782e81bec891a45351e1479bc2307e32d2f3366f92e07cdfe653dc9d4b7b524f992da02b923f43c5a870062c54407f9e7a6ae3bfb2e72196db60db21e4c1a950c1fca366e9b2ce33313afaf6ade5b81856bd38525eb2f0368f387176f30d0f8a3a53591d4571ddb514ba4fd7589e631c837b1bdcf3f6ff20fa2d23a1ec749f59ec05bc09c008396299044d63dc00be85d3773fc5108239305d0350462ec3f82d2266aa9dbb7d35dc40efd40194f666cf871d3e5929549d51f2e4652f2cb3aa0a9851486f760ec07c59199822653e0105dcde66dff8e6b1370748c8051c19a22d7af475d10a9fe1ef6d2cece61cda8670a2a334889a849ed05c95406347785fed7e8577ecfb190aded775a0aa8d81d61cb8e7da9f66998d545ee4467da06f9221ad8a4d35924e3f723059804e184d4d41931afb7d75e78eee8d4399fad8756e600096f1c8772beca9c38dca7a27e098d9014d54b04a663491ead1d9b26aafa64e5c1f8b983f9d55062a5405819774574030835322494ea544cca258de296bf62d9d822d86ef514027641883940626d1d5408f8c2f2e808b741b850deb3869b8d0dd105418dd71b1ddafefc7bd7f7654f56a553add085e11d5559461132c9a8e8d98cb3dd254fdacbaedc132b91a123ce40038d9d962cbe0e111af0d4d9c0ea06a7711385f5db3605ec4376acd7dcd4c6185d510405de9e5e61c728b273d8e3c2459a56114a8ddee1958687cfbffb7a7ee423168b15d384491a2a2a8f107824ba948ed4bdd4d1efcf89bf54abac0164ec7e9763be3a61898964692c8a003eae2d75253607f75c99c138f13e0c3918bc96574646301756d05a237fe910b1ba31400f7830c2d41fec99673327d9be2e8e27941828f2e88ac6d3b59f6e140fce9b3f07de0aee5619d045dc4c2cebd2ea8fa70988141d07e10f81b883f4a6865af8793d1f3f665e1ecb3bcbf168bbbc0e0821f8e0562b2dbcdb831162156baba8f008f58b372805ee613268f957bc9b19fa70208b4a831c9442ea6d811731f3da96c18e9bc3299e1ac3e89e55f02e94e4a8473d1b6d658d196f3bd62247d998175fa6ed83062dbbd93b636c5e074202da44db33197fe9a79362fe10dcd87a9af99c2304f9a90eeb01da49dbb3ac50e3f18981887afbd44c40e56044163fa66c46243b9bc6f573673980805b33378e58a9a6b857a96dbfaf414a9e8b8df87384be17937faec515e2a804bed17d8a92e9cf1cfcce8c22262c6df43187ab9b01e0b750a90038eb8116cb82ead84ea45099e4a3b570b796e24dce08b91916ecda7228d18fb178a49b8fc5abacb9952b96258fe7898d136a440dc267eae9e98c8f66b773ede3f19ad924020c3d2951ba2fe2f11df3112abd5bbcef43aefc8e8739525a7cd4484264b9793197b82bf6ba579460f8ebca875eb511a6d204a1ef34a3b43072b519435cfb3ca9374a39d29d1fd0fd66b54c4131d7b39df691bcb36f390caac21e68e7f6a539825e11db23076a1bbdc7dc269197403aaa0fec63cc888511cdf731f39b00f1b08245d2a3bbc21783410d3d99eccafb510697e14783e5ab663b6ceb53adbbb84c8e22df25125cb76efe3cfcb7963adae966f11ee8fc0c9a0b0d89b08ba34af7f81b3d7ef0dc56470344a3ce4163f725e39f54e75305d9a58e471119dba6be8e3fe79041aa582225f22ebf28d6f7a8bcf25f20cf2ba3a5dc5156cff702bdd53f64f95bcf1e11c24abdf4de07050be38264ebd5c2dd9866cafd7e3024d21c1914748d351ffb297a5924e201855c5c5f6b9a88b2503c1f9d40b28cd9360a0aedbcd4dce29ef509aaf0b2bc526b966f6e89b8172d48ac4f3d49c8c0065b40836936c615d05f8a13700a52071be2aab36a13397b6ccc92f354fb45b17f5678e9ba355afd93ae4254fa1d6aba14354c61018e0b20bd1bf4eb945b2ee3e8fbc09f1a86d48d6904404ec6e885aa17a005d397624baf8d32bbfe8cf7b10a2141f560a426dbc4b0ccd2944cef8c948f122a86789637dd7b81943083c38e28803e9437d65e5f631fb01a8b93314e340068c249666ecf89861bcea3cba7e30ac23ed79b0c8b64f61df24cb5358eac6d539e8424e401ad582be37bb912a3020d9ede40f08dfa4de7d5ae1182e800afa134a1dc69fe67e37d474e36e703ec81f672b2fe01f8ef3045346ce567b6c2cf9916674a754efb7e3cc7cc87829910a726a9355c3049928cc555569a677e1f3ae5b41785fede262609c3cced124dc365cedb64240e6ce444d13398c34d4be95b3d9d4aded69fccdc2d02359e76f8ae4edd702e78a85c3d37426af7ed910a64599598343cf177ce23ca1e25b8af88d29248c97f87fb78d0e5a9c16956c368a7b579e747d28ca1dfd1ebb014995a1a5ebd83c582ae2a7829197cb01f3c574806059c65192b5f322865f64567330036f96cbb2054167e01b3fcf169ab2d2b5a3aa5200679d51275f6f1561406ee5950419c351dde42ce1cdc1dead71cbfd20116e8a6dbdf423716709aa1cf29b3ea277648c0ba0f489af73e4e73bef2a7590df61b401e48a9a7beea4e511560108b4407189f9018241fb5b2f5da0be5dd4acc5605862dae4040b2ae7d628832ef00327b9e6b0a87339f1353b35b29bef5676b71a5665438c08479066df72270b8608efd753574a755cb9373a8bfcbf83f4866ab6aa048069ee6321555658a17462bdbd2245ff0d9b7a5283de3f329a93928badbd9ae2b7332f20fb24b5176535cabbead5935d05f318dc2fcdc6499f26893788518d1b811e4afb98349d698a40ad0b277e9ed9726b946e506b5cefa85b5fae8bca3835b2527ade04c62892425a9ba220c45c761fcda793851baa123e79a3a49dcd52b484764bb6553ba996c6c4d4295903e68e57016199675d4b952e9b4461b76ab49297d58ae08c6c8d58e8d957300f000dd7ff6e4b63223e06c436216461af0756b3e143d0921620b20bd879ef0edcf63a3656d9fcd3a0095531099b5d701e11dd20de6f03206f6d1fbaa5fa5f954ed681819523ab973aa4ca26307d86f225e968b9dbe1da3c712af6f8b527ad8590ed114d5a437e779bfdaaabb247ec44b16b8d87776d896cb4f46a6c017bb86eb20aab51250819fd653837fea39a1a7941aebf67fae35d0599e29df9937686141c662880030ba40ecf1c5b4cd863614350b0c8222d418301408d0d4f4b2353ecc7b046d03e3219f7ec5f623f37be91261d7852c0f34897b58093c6ab5bc41b59906609baef672dce47fd06ab9a8c395489b2ca48210cf4941fb6c192185eaea408831cc9d3ffb5a6104b83280bcb8efada6110757540859ac2379f57231bb6787b626924a80e359e53f4de23d7d599f06d6753f83a7a5b63dd4a2657cc484dc4e49a2d7e15580e77154698fed52b9b3ef6f2e8760c2f9f8a3c2fb610273931d763bfd27a4c2ded356bdecbb54699c472e5f94ffc316e4e996f72162ddab25b140e981c260aa15ebea7fab6f64b67f27f89186feeed3d4fba6444aa5f0a29a2fa40a505f9ed57ac943025ef4d7d980cf0dac66aa8f9e17ed5641564fcb13b111e7596bfd5bd97a406df7fcfa7d2edbf019a52a30e036d53052c9176d774f26a8bfbb0c558c40c14b77356ed65d1e4fb93bb1d818ad92a52c602e55690fc379760c3288c4ca3b57b44ff7ca679ed77fd3a7e30c8df1c5eddca6c48edd582a76dafcf36d720331ce41aa67c59cdc0d6c05445de26fdaaf3b49ada0d9b94f8abfef2f453f5aaf9ac03b2c118ef44e300ba052fa92cb553a0489ae392af81c82c5b9a3f04dae7d44792c1c842f3fc319baad0eeba73c3be1cbff3561deaa43f35a8a169103f96d62e31fea2c4a31fc928226925dbb8ea950dd1ce2bb7a55cf0aafd31560a9a051288c47a6f2e6aeadc811bc8d3b96ed1ebb7841dbf372e94752b1dadddec03b4fc68590ac30ec12744ad8fd279f32e27334704590b39ebc1239b4c610c35a3c8062d5ac84d54901a619f6bbc3aab18c04c1101beaa015080ec68091809e3ad84968d3921d25e223ef45d8ae8219b4aa99e36c6cbd20cbbe1ad3154c4fac510f7013656ba29de8815841", 0xff0, 0x20, &(0x7f0000001240)=@un=@file={0x0, 'usb_gadget/g1/configs/c.1/mass_storage.0\x00'}, 0x80) write(r0, &(0x7f00000001c0)='dummy_udc.0\x00', 0xb) write(r0, &(0x7f0000000200)='\n\x00', 0x1) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x2, 0x20000, 0x3, 0x0, r0}) r2 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000840)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {&(0x7f0000000280)="95f2513edf672d97d9c16f7de78d586b56d9622a53a5c4a87ec4f7400033596542b3d0112570d8c2b7d5380d9f937759d7ca55622a7b933d7541f1a7fae4be446caf64cf2b117c80a7e602c280316ad1a0deb50a74789460df588d2d", 0x5c, 0x2}, {&(0x7f0000000380)="4fb296be5f8068fd80eade1aa0faf9c44cc3b21ea3060bf3080f1fd39157e33bd0e93a32a71830738439f9e567d30c229802bd082812a8c3fd03ce61f2f3bba02629f4462cf6d84ccbb61e249b59c2eabff023276141a78ed1ecdef540c507e6c663fdf441aaec6f42eced28788122f2af46c28a6466a92493a275c83abb3e02648f1a7d8ff3e8c9255e3c013854a00f2aea6b2be55cad377a6ac3d7e9cad170dbb4dd3f4937020dbe32221f9a1a12540b760dd7830bffdbd35d60a73378f11eefa92ec6bf887c4b1b00fd82686f7cde3088d7956514236aa0b896df571c33fd07ea", 0xe2, 0x2}, {&(0x7f0000000500)="ce82ed4c7896fa75e9d1bc03fc6ad38ffc587d6bb93d39523d26a15c5c9584fcea32cbd14ac29d0207d28a9871333cbe124c7d83d14dc1d07f", 0x39, 0x3}, {&(0x7f0000000780)="665bafbcf67e87cd5428956526be7953a4d74263f93d6daca268542d6ebbf5d4adeaa00a5761317a60aa55eed35eb8524fc2bf747947a58fc4e06188507c5dcb78f07e8eae432384f87eac3217932449445980c78731d512cb49e60191a7cd3199c13f5dec0d", 0x66, 0x3}, {&(0x7f0000000800)="e72f26355524223ce927049e55bd3912e72050fcc0971e06a7a437b9cd50d00c35537c5f11bde38990e17a3ece1ef5be148d8d24b0bde57622e94757e8a668", 0x3f, 0x3}]}, 0x6, 0x1}, 0x1) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x5044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0xf, 0x70, 0x18, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1c1, 0x29}, [@mixer_unit={0x6, 0x24, 0x4, 0x3, 0x1, "a0"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x3, 0x5, 0x1, 0x5], 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x10, 0x2, '\'|T'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa5, 0x8a, 0xc, 0x1, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x80, 0x40, "f1c9be"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x9, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xcb, 0x9, 0x2d, {0x7, 0x25, 0x1, 0xc, 0x6, 0xa0f1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x7, '1', "a9de"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x4, 0x6, "e722048b080f84"}, @as_header={0x7, 0x24, 0x1, 0x45, 0x24, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x7, 0x9, {0x7, 0x25, 0x1, 0xc, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x311, 0x40, 0x75, 0x5, 0x40, 0x7f}, 0x21, &(0x7f00000008c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x6, 0x11f0f, 0x5, [0x0, 0xff0000, 0xff3fcf, 0xffc03f]}]}, 0x2, [{0x73, &(0x7f0000000900)=@string={0x73, 0x3, "e710f495955e5c5f747f13c56c4a0af68f4a64b78ca849ac58d06c587210fb71134b5fa48d3b57eb18e3f291e67513e6ab63168f87c7212985049357bde9494ad6d5d15441edaa129c77022dd2a1038ba319f00852e5a297be8bbc7743dfaf28d71e29a73d4e62a3458cca61d0e2f8becb"}}, {0xc6, &(0x7f0000000980)=ANY=[@ANYBLOB="c60346fc617cf0cb4f4006000a838859c865d7b7a87187427daf82ffaf8c2ef177002e47aefb2fb0fcebab7c4687ad7cb19233322810802785193f95add5dac985b8a83e8468cd1c781e4db36aeec20260add24e77b6e80316d52718b1bf224df4b6cf57daae3b87e21693e34aa5d9bbae6b5571a0407a0bab2aa3b7a1f3e4801694fd82db06562b1bd2a312c19c52e7051e77ab20aa5c002b4217e65f53ec9304d857efbefa5ba1c6f6a9d117a0b5b9dcf1f6aed6338c1487a600b7d27ebc3be50000000000"]}]}) 14.879559403s ago: executing program 1 (id=816): unshare(0x22020400) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 14.441987822s ago: executing program 1 (id=817): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0x2, {0x2, 0x3}}, 0x0, &(0x7f0000000200)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "125ad30f34b60bb862e3383033348907"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x9, 0x0, 0x1}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x1, 0xe9, 0x1, "e14b1911", "6b742f86"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x6, 0x0, 0x3, 0x3, 0xf8}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x60, 0x17, 0xc5, "dd4bd7a0e4023f44a35993740d8f94234bd5cfc71a7aa8210abb4dac95390bfa15a4d9952f9146e4339415c759b7c183d177766d09cd4446f6d38f5453a68455caab03fe40c8a6d8f345a426bd1735251a772cf8db42374996f51c521901fdbf62020c2adb1a54c3b812d82070d54133224f8db3dd70544e7646caa3fc60fe00fd93955eff6e0c6d7da538e6d5abc4cdc2e90cf4b1bf665b08016a10a480f320578ae3361b37ea7e2dfa6c68271605c2a0a0840454f0f4b9e1ad788bfa0cb2c30de4c91866"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0xb, 0x2, "43aa"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="b391b770e0cd"}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "e0d3"}, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x19) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000022c0)=""/4108, &(0x7f0000000000)=0x1068) landlock_create_ruleset(&(0x7f0000000100)={0x1028, 0x2, 0x1, 0x5, 0x9, 0x3}, 0x30, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 12.151213694s ago: executing program 1 (id=825): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000000)='0') syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount(&(0x7f00000002c0)=@md0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.08119493s ago: executing program 1 (id=845): select(0x40, &(0x7f0000000000)={0xe4c0000000000, 0x5, 0x9, 0x5, 0x6, 0x8, 0xfffffffffffff907, 0x400}, &(0x7f0000000040)={0x400, 0x200, 0x80000000, 0x4, 0x2, 0x1, 0x2, 0xffffffffffffee7e}, &(0x7f0000000080)={0x8, 0x7, 0x1, 0x4, 0x3, 0x6, 0x7, 0x6}, &(0x7f00000000c0)={0x0, 0x2710}) r0 = socket$rds(0x15, 0x5, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={r2, r3/1000+60000}, 0x10) r4 = getpgid(0xffffffffffffffff) prlimit64(r4, 0x7, &(0x7f0000000180)={0xe49, 0x2}, &(0x7f00000001c0)) mkdir(&(0x7f0000000200)='./file0\x00', 0x99) getrlimit(0xc, &(0x7f0000000240)) getrlimit(0x8, &(0x7f0000000280)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x121000, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000300)={0x6, @sliced={0x2, [0xb, 0x9, 0xb8, 0x3236, 0x6ce, 0xef, 0x7ff, 0x2, 0x8001, 0x3, 0x200, 0x8, 0x0, 0x0, 0x81, 0x10, 0xd1ab, 0x1, 0x5, 0x7ff, 0xe, 0x9, 0x5, 0xe, 0xb5, 0x80, 0x1, 0x6, 0x8, 0x7f, 0xffff, 0x8, 0x7, 0x3, 0x5, 0x8, 0x0, 0x5e24, 0x6, 0x4b97, 0x5, 0x310, 0x4, 0xd, 0x155, 0x3, 0x5, 0x6e], 0xa}}) (async) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000300)={0x6, @sliced={0x2, [0xb, 0x9, 0xb8, 0x3236, 0x6ce, 0xef, 0x7ff, 0x2, 0x8001, 0x3, 0x200, 0x8, 0x0, 0x0, 0x81, 0x10, 0xd1ab, 0x1, 0x5, 0x7ff, 0xe, 0x9, 0x5, 0xe, 0xb5, 0x80, 0x1, 0x6, 0x8, 0x7f, 0xffff, 0x8, 0x7, 0x3, 0x5, 0x8, 0x0, 0x5e24, 0x6, 0x4b97, 0x5, 0x310, 0x4, 0xd, 0x155, 0x3, 0x5, 0x6e], 0xa}}) clock_nanosleep(0x2, 0x1, &(0x7f0000000400), &(0x7f0000000440)) (async) clock_nanosleep(0x2, 0x1, &(0x7f0000000400), &(0x7f0000000440)) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000480)={0x2}) clock_gettime(0x0, &(0x7f0000000500)) (async) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futex(&(0x7f00000004c0)=0x2, 0xa, 0x0, &(0x7f0000000540)={r6, r7+60000000}, &(0x7f0000000580)=0x2, 0x0) (async) futex(&(0x7f00000004c0)=0x2, 0xa, 0x0, &(0x7f0000000540)={r6, r7+60000000}, &(0x7f0000000580)=0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) exit(0x26e9) io_pgetevents(0x0, 0xfffffffffffffff8, 0x2, &(0x7f00000005c0)=[{}, {}], &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000680)={&(0x7f0000000640)={[0x1]}, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f00000006c0)={0x0, @local, 0x4e21, 0x2, 'sh\x00', 0x0, 0x8, 0x3a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f00000006c0)={0x0, @local, 0x4e21, 0x2, 'sh\x00', 0x0, 0x8, 0x3a}, 0x2c) kcmp(r4, r4, 0x4, 0xffffffffffffffff, r8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/179, 0xb3, 0x0, &(0x7f00000007c0)=""/165, 0xa5}, &(0x7f00000008c0)=0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x2, 0x2, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000a40)={r10}) recvmmsg$unix(r9, &(0x7f00000074c0)=[{{&(0x7f0000000a80), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/141, 0x8d}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000d00)=""/218, 0xda}, {&(0x7f0000000e00)=""/114, 0x72}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000001f00)=""/2, 0x2}, {&(0x7f0000001f40)=""/52, 0x34}], 0x6}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002080)=""/138, 0x8a}, {&(0x7f0000002140)=""/186, 0xba}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x3, &(0x7f0000003240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000003400)=""/1, 0x1}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/86, 0x56}, {&(0x7f00000044c0)=""/198, 0xc6}], 0x6, &(0x7f0000004640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004680)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f0000004700)=""/22, 0x16}, {&(0x7f0000004740)=""/16, 0x10}], 0x2, &(0x7f00000047c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004980)=""/69, 0x45}, {&(0x7f0000004a00)=""/221, 0xdd}], 0x2, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/104, 0x68}, {&(0x7f0000005c80)=""/242, 0xf2}, {&(0x7f0000005d80)=""/187, 0xbb}, {&(0x7f0000005e40)=""/76, 0x4c}, {&(0x7f0000005ec0)=""/236, 0xec}], 0x6, &(0x7f0000006040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000006100), 0x6e, &(0x7f00000073c0)=[{&(0x7f0000006180)=""/115, 0x73}, {&(0x7f0000006200)=""/6, 0x6}, {&(0x7f0000006240)=""/242, 0xf2}, {&(0x7f0000006340)=""/8, 0x8}, {&(0x7f0000006380)=""/54, 0x36}, {&(0x7f00000063c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x8, 0x12122, &(0x7f00000076c0)) (async) recvmmsg$unix(r9, &(0x7f00000074c0)=[{{&(0x7f0000000a80), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/141, 0x8d}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000d00)=""/218, 0xda}, {&(0x7f0000000e00)=""/114, 0x72}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000001f00)=""/2, 0x2}, {&(0x7f0000001f40)=""/52, 0x34}], 0x6}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002080)=""/138, 0x8a}, {&(0x7f0000002140)=""/186, 0xba}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x3, &(0x7f0000003240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000003280)=""/98, 0x62}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000003400)=""/1, 0x1}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/86, 0x56}, {&(0x7f00000044c0)=""/198, 0xc6}], 0x6, &(0x7f0000004640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004680)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f0000004700)=""/22, 0x16}, {&(0x7f0000004740)=""/16, 0x10}], 0x2, &(0x7f00000047c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004980)=""/69, 0x45}, {&(0x7f0000004a00)=""/221, 0xdd}], 0x2, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/104, 0x68}, {&(0x7f0000005c80)=""/242, 0xf2}, {&(0x7f0000005d80)=""/187, 0xbb}, {&(0x7f0000005e40)=""/76, 0x4c}, {&(0x7f0000005ec0)=""/236, 0xec}], 0x6, &(0x7f0000006040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000006100), 0x6e, &(0x7f00000073c0)=[{&(0x7f0000006180)=""/115, 0x73}, {&(0x7f0000006200)=""/6, 0x6}, {&(0x7f0000006240)=""/242, 0xf2}, {&(0x7f0000006340)=""/8, 0x8}, {&(0x7f0000006380)=""/54, 0x36}, {&(0x7f00000063c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x8, 0x12122, &(0x7f00000076c0)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x8010, r11, 0x9b8b0000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x8010, r11, 0x9b8b0000) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r12, &(0x7f0000007880)={&(0x7f0000007700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000007840)={&(0x7f0000007780)={0x88, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x5, 0xfffffff8, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80000000, 0xb1, 0x6, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x90}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x24008094) 8.749623643s ago: executing program 1 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3b, 0xc) syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x484000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0xc1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3f8, 0x1, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x3, 0x5, 0x0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x9, 0x8b}, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) 6.670157613s ago: executing program 5 (id=860): syz_usb_connect(0x1, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff00000007058102400000070502024000000705830340"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000440)="e984d7e8484fc59e72115d7c3e653f849243cddaa3b92f7cb582ae1aeee124094306f2178e65f00f7611f005ab137c3fb10b26f58b6e5d78ea723755d512394c8615a197b8d9bae611d12184bf941574eb1c2619325a1814c9cfb2967b14c4000044cdfd1388625c940e0e5e2b5f94384e8761f6fc2134500e5bbc8d73f0d793c88bcaa9949bafaf6449480e5439e706002d76a09c816a2440b6b89ba618ac32a400fc66336737e5d0d220c8cc865c4e4aac8b9c4f828927bd4c5121369fe3d3645c09e5554f7f789939768a09dc81778d04345aa3628ae10e0f52f4a9f181f6bafccea1f89b295a525355f6923e95d35b3199c37596664179c3d6bd280cc27585bd4866d28dcd3448c9784026cc6fb34d4bcf8acd959149bbf16b78bde95d68d0e38507697b640a88fb0a09acb64cc82e5221708dd77e86ef2cb2ffcb2654024c845350ed45b3989fb7de30b40364e44caf064609e5cb77ea704fc691bda5a18c42fbecac8023d08392475dc4d8b5dc8972665d99872301e4b561c21e2d3bb15472549a870dc261bf73c194aa67cb5dd7bfd430b6072b0c844514490195af74a4c2a74e4f13816b36d067cae5dde0fed36fca14c4bb63635d3faa000000", 0xfffffffffffffe86) 5.865567253s ago: executing program 4 (id=864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x7) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') exit(0x5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) eventfd(0xf9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getuid() setreuid(0xee00, r2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="08d8ef146d4f0025bd7000fcdbdf256200000008000300", @ANYRES32, @ANYBLOB="0c00990005000000340000000600b300020000000600b400210f00000600b4001a0100000600b30003000000"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5.611803964s ago: executing program 0 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000400)='ceph\x00', 0x0, &(0x7f0000000380)='addr=127.rt=2049,proto=tcp,vers=3,mou\x8ctport=2049,mountpE[\x8f\xfc\x12\xebrot\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000c142fde02dc7cd9bb78df2505003d"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000005c0)=""/199, &(0x7f00000006c0)=0xc7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r8, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r9, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 5.194777221s ago: executing program 3 (id=866): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250100000000000000014100000018001700000000107564703a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r7}, 0xc) 4.71757097s ago: executing program 3 (id=867): userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x2000000, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r6, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 4.645624651s ago: executing program 0 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000020800084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 4.539494567s ago: executing program 3 (id=869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000007000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.493235688s ago: executing program 4 (id=870): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x5, 0x7, {}, {0xee00}, 0x30000000000, 0x7c40}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000880)={[{@xino_on}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@nfs_export_on}], [{@smackfsroot}, {@fsname}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x7}}, {@smackfsroot={'smackfsroot', 0x3d, '&[\'+\x9b-'}}, {@fowner_lt={'fowner<', r0}}]}) open$dir(&(0x7f0000000240)='./file1\x00', 0x40001, 0x40) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000340)=""/66, 0x42, 0x10040, 0x0, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000004c0)=""/241, 0xf1, 0x100, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_register(r4, &(0x7f0000000640)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'workdir', 0x3a, '(@\'*]:*%%-+(-}', 0x3a, './file0/file2', 0x3a, [0x4f, 0x4f, 0x4f, 0x46]}, 0x46) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000000514200025050000fbdbdf250800010001000000080003070000000008000100010000000800030002000000080001009c5a344cee0d06fa01000000080003000200000022aed87c2f7dba20f4af3e6ed6326ba838"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000001020000ff0f00000000000079d5bec2c2f355edddcb3b00abda3d7aa520acff7b7595fe56780d8273977d98854db4928e8f607fa9c4ec8232d8e697aa071a0a2b607db0c554bb4e96c635f639fc193b7cf62095d359a4ef9231a1b24560302a677f8df3f67a"], 0x402800) 4.417668041s ago: executing program 0 (id=871): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2086408, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.328673554s ago: executing program 3 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x3}}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5e}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x684, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_EXPRESSIONS={0x250, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x1c8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1bc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_DATA={0x1b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "531e99818f4d56f4a437e6eea306327e6dc3236f1c3496beb521a39804cca69838eb02eb3afd4ae6ed3fe21d1f80bb7a057ff5c74c24409a8f37f11223f312e86757201ee70022310ce8215034155be7b71ed78121df42494472426bc0b20f58ccaf79439df507cc7aa00164ffeb18e491df197f2dc34088b61df193f653c2fa87be870cc2e3c1084f14155ec8cb4f5eb52ec242cba9d8adc912526bb406c8d73cc21d3bb81d0be294863e4c7a07fe7baf87c06b3ab2181af85ede90c8b7e2a97b912550567d84ce2f689cee8ce72f37411e39f08ea2cf6fcb50373791dac19d8913f9cc82066369882e4c2ee14bd92b808040"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x77}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x70}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_USERDATA={0xd5, 0xd, 0x1, 0x0, "5ed1816d3adbf494df6f2048123007ce276e30b2d036cd48f10d4e11bd6b26074f09da02d38a74babcb40bb3ba52100d57e8b6631885dbe3213230c7a92037ee2cf2b73f405228aa7e9b3dcc08acddfa1aa6475adf1f5876284f2a2b329dc0e1d342b404df63ea32659351e8eab1f474534cfb63f0f759c216119ea5f5c38df378611495dfcd17d9d9ccae1141c6248e92bf1939a77ff3aa391758e15fc10bb05418eb6d4c39483ba008fb87950a71318f4f2c2ce3dd566946b9e91d234d2b757d7a626600a63860f1c32578fa02e035a6"}, @NFTA_SET_USERDATA={0xab, 0xd, 0x1, 0x0, "ce06d3fbcb6ce4d34d5f3ea10d668827a4c2d14eaecbf83bdaefaeba04abc805ad4c44675252ca295084276f5ec071292657f9dce841e944ea02901a151ec9d3c6d44941314152952386b2b423a43c36e5c6f1c312987e041ec6f53028b72c8469230f6116a0ec1f94b9fa37f3d59f588f680bd299d1cca5dda81f01afe1de7932441d1f7de12e1444ded377f4a9a2a1a2caf061bb7a37a8183d1171d201e7b33c2d13a6ae111b"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x274, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x569e}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x303}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b73}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff0c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc43d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9650}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6ac}, 0x1, 0x0, 0x0, 0x40088c0}, 0x2000080) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 4.328156426s ago: executing program 4 (id=873): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x80100) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)={@fallback, 0xffffffffffffffff, 0x11, 0x2008}, 0x20) syz_emit_ethernet(0x3e, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x7ff, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 4.149484276s ago: executing program 3 (id=874): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='usb_gadget/g1/UDC\x00', 0x2, 0x0) sendto(r0, &(0x7f0000000240)="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", 0xff0, 0x20, &(0x7f0000001240)=@un=@file={0x0, 'usb_gadget/g1/configs/c.1/mass_storage.0\x00'}, 0x80) write(r0, &(0x7f00000001c0)='dummy_udc.0\x00', 0xb) write(r0, &(0x7f0000000200)='\n\x00', 0x1) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x2, 0x20000, 0x3, 0x0, r0}) r2 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgid(0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000840)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {&(0x7f0000000280)="95f2513edf672d97d9c16f7de78d586b56d9622a53a5c4a87ec4f7400033596542b3d0112570d8c2b7d5380d9f937759d7ca55622a7b933d7541f1a7fae4be446caf64cf2b117c80a7e602c280316ad1a0deb50a74789460df588d2d", 0x5c, 0x2}, {&(0x7f0000000380)="4fb296be5f8068fd80eade1aa0faf9c44cc3b21ea3060bf3080f1fd39157e33bd0e93a32a71830738439f9e567d30c229802bd082812a8c3fd03ce61f2f3bba02629f4462cf6d84ccbb61e249b59c2eabff023276141a78ed1ecdef540c507e6c663fdf441aaec6f42eced28788122f2af46c28a6466a92493a275c83abb3e02648f1a7d8ff3e8c9255e3c013854a00f2aea6b2be55cad377a6ac3d7e9cad170dbb4dd3f4937020dbe32221f9a1a12540b760dd7830bffdbd35d60a73378f11eefa92ec6bf887c4b1b00fd82686f7cde3088d7956514236aa0b896df571c33fd07ea", 0xe2, 0x2}, {&(0x7f0000000500)="ce82ed4c7896fa75e9d1bc03fc6ad38ffc587d6bb93d39523d26a15c5c9584fcea32cbd14ac29d0207d28a9871333cbe124c7d83d14dc1d07f", 0x39, 0x3}, {&(0x7f0000000780)="665bafbcf67e87cd5428956526be7953a4d74263f93d6daca268542d6ebbf5d4adeaa00a5761317a60aa55eed35eb8524fc2bf747947a58fc4e06188507c5dcb78f07e8eae432384f87eac3217932449445980c78731d512cb49e60191a7cd3199c13f5dec0d", 0x66, 0x3}, {&(0x7f0000000800)="e72f26355524223ce927049e55bd3912e72050fcc0971e06a7a437b9cd50d00c35537c5f11bde38990e17a3ece1ef5be148d8d24b0bde57622e94757e8a668", 0x3f, 0x3}]}, 0x6, 0x1}, 0x1) 3.570144911s ago: executing program 5 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x31}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0xbe9, 0x0, 0x7, 0x1, 0x4]}, &(0x7f0000000340)=0x54) sendmsg$sock(r2, &(0x7f0000000a80)={&(0x7f0000000700)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)="8197830511861024665512b79d9a334f276ded42362cb6d507c75749071217bfbd7ad769b61e9b8f7399b549155110cbde91313b2ecd30aef414659ddb309511", 0x40}, {&(0x7f00000007c0)="94ca94049a8ef45c2e619b3d4950848a8075fec4f5aab125ab9f67f701291671fe37f58f425b9f4f0cd29e4a8d86720acd415c835d6392b91f5685294a15ac755b3f73908739a963dcdb1ef7c70be3e1790c7eb00b5f1181fa248eb7c877a230d15a54eb4703555f4dad343c0f52b8cabc342f0e7dc0ff9f4ed1f281bdb3d7bd69c2034f34c8fcb3104870ac5173267fb1bde36b3a2916a9145c2ffa87c12fd6f1c6221e", 0xa4}, {&(0x7f0000000880)="033394f5a431c6d6ff1bc78184fac8aa553836a9cd33f71caa41d343ef8db906e1ce4f97341dc61930db8b2224131236e020e9a3c5baaf2d3959add388c17bd77d3a814f146b3f05b09f7294afa430d5491c3a24375027d7100d7ef9d7749c09d8a6e82138c820f03c7e3bbbe958f392e7e106be25c3bda67f1ad2f3d6605b95c49ee7167cd3beaf", 0x88}, {&(0x7f0000000940)="c378941e2f295d54d6fb350fb122c1746c749c88698d38141b21dbd3ece2dc3c851ef28013b1a55fed7434d477a07c8ab7427b78445e722c28d7608e29b4643ae2a950077795657ac1d1e4abc1b73895c7e652385c98843ab3bb478a28a41d77ebe77c5235c59448b070a148bd75e43a89b8dbd64d4a4a4b76e6d04c4a08e580e9d7589c40e97f2a56ed8b45df4f9a7f1922e63e44040dbcf6eed84aca030a2420047a60118344f9749f681bfff2d4f5dca41a93da1f355146026f52b773b7af386568caef1683daa3e7b2e1e4cb5f9641bb124e2f3f1473cb74d9763576e969c401748a6efde63eb1", 0xe9}], 0x4}, 0xc1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8c6b9a8a1b74fbbdc4c198f156693672535624cc075eb0046244131a15d31"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000900000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000600)}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 3.562115107s ago: executing program 0 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0018000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.403629611s ago: executing program 5 (id=877): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754362, 0x4, 0x9, 0xd, 0x9, "0100000000e409878000000040000000000018"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) ioctl$TIOCSTI(r1, 0x5412, 0x0) 2.387626993s ago: executing program 0 (id=878): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000085}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100feffffff0000000001000000040007800c00020068fff829c0dd5d87"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r6 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r8, 0x0) 2.321368567s ago: executing program 4 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000400)='ceph\x00', 0x0, &(0x7f0000000380)='addr=127.rt=2049,proto=tcp,vers=3,mou\x8ctport=2049,mountpE[\x8f\xfc\x12\xebrot\x00\x00\x00\x00\x00\x00\x00\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000c142fde02dc7cd9bb78df2505003d"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000005c0)=""/199, &(0x7f00000006c0)=0xc7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r8, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r9, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.056499645s ago: executing program 0 (id=880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x1003}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xb) setregid(0xffffffffffffffff, r7) r8 = getuid() r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x11, 0x0, 0x4) write$P9_RSTATu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="750000007d020000005f00cf0501000000080400000005000000000000000000008003000000018000000b000000000000001500626c6b696f2e6266712e656d7074795f74696d65001500626c6b696f2e6266712e656d7074795f74696d01002e", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r8], 0x75) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0x4, 0x8, 0x8, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x6, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x700, 0x8, 0x3, 0x4, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @end, @timestamp={0x44, 0x10, 0xb5, 0x0, 0x1, [0x6, 0xfb2d, 0x78b9]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000a40)={0x1380, 0x12, 0x410, 0x70bd28, 0x25dfdbfe, {0xf, 0xa, 0x40, 0x1, {0x4e23, 0x4e24, [0x4, 0x606, 0x0, 0x71e9], [0x40, 0x0, 0x9, 0xffffff95], r11, [0x0, 0x1]}, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "9a38a466ea6ce4682fdb762183d0f701466f020cdaa9dfe3918a90ee4d0e4ca9288327183f40c42adf33721974920d94675872e7f46cf6cd18d073b85a50a68b3926e335316f61ca5b5c1b9fe2f6ccd175c48574c85746c92848fe6f9008a591042f7f5fd92cb5cc6ded7009fca459f88164578825c7364e5eeaf8dde3b9dba1a5374059cd31224bd50dead2b572c6d1dc50eabc9dc0dfd77ff66ad76b4e4e08fa53107b4f73e66c8c0d4c06b7930143b35ad5a0fd2f2b2e35c5ed5f49fd5aef5b"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "b5eb434a7426d78608676cb6a19e3dcb1e3a00dac6376832d501be4cf78e2a51c0331abe2bf84609c54c47bd81b2a8a8ffd8a859660a0d891474"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "11e85b1cdbd11047cbfeed5803f33fdb2c4e22af925aa48621ed0b7b997d21780a74ab41f6dd7fac6d251ab36cc07e930ca7e608cdb0619176af20b37c50deced25e685b0842f63fa337913c0926bec84f79af0ab22f5b250840c033c6a1d153"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "61df3ce0cc5c9b8a98e759e04a14c30ffaab897a7cde7509828ad500bee5656e14e544e3719770e20ae587d33e84ec"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "4ffef39fbb5107cd944c999335d167ef9468d44e29566a49ff10bc1d2f9e54198b4a82348ebbf960a2b1794036071e448ed2553ccb0dd02c1628e066d9487cc8"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "106290aa25462598aff95406993192e1150d020d62c93f7a403e309fa6e4054d42c36c88c5688f5b99eef78a9394489021afde2df45a4653c0dd945497eb110060f5801bd2538395a4588f1e12b62581afc0a4aeca306bb375"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "291444230c5e6e1e6bbdc45fc51bed27c6ff8763c5beb9bda613754f830231210d8e480d7ba7fff96797eae494bec0ba479edd7cd5fb46fa72ea2a79474c65a80c31ce7fe0487c0f4be7cd9ebd278ee519a997e0796d7973ec57085c73e06fc85eb6a3ef6584297e2ebd8200e9419d2567e7f9ff5bf30f12388d62ca05fcede68a58914180c9049f150765d285b6b09153cc8146f9fb012c22cdf3c4e82d09b8734135121dba51f6077de38e94c83baf116d4c6e0f7b2dfbc67debcbda9e8e683b64de7cfd6318b03d587c8a28089f63a5d2c08c23effb5889b1468d6fd67d23f8"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1380}, 0x1, 0x0, 0x0, 0x20000820}, 0x200408c0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xb, 0x6, 0x8, 0x85100}) 1.363917614s ago: executing program 4 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)="ad665e71e4ce9a1dc9d05fdd4eb4a3914bcc71e53e5e00bcb4f2115e5615551a4bbc241802b989efb2f8e5061cd6f71b984223556b928bb5d9dba9a792923c1d8e80518fdd7abf6e42adf6472464d2d0021f501689640dc9107add0c5e2cdd0fa5466b2f72581f3191b689c9afbf4229981fa965e77e15e662c7f4a086d55bbfbc1ce0119004ddfd21f68e328ed742e851eb7c802574", 0x96}, 0x68) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listns(&(0x7f00000003c0), 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = io_uring_setup(0x1b7b, &(0x7f0000000640)={0x0, 0xc48e, 0x1f480, 0x2, 0x399}) io_uring_enter(r4, 0x8ae, 0x6931, 0xb2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r5) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x30dc) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000500)={&(0x7f0000000340)=[{0x1, 0x0, 0x7, 0xa, 0x8, 0x10000000000000f, 0x1, 0x6}, {0x2, 0x0, 0x97, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x80, 0x6}, {0x0, 0x0, 0x80000001, 0x8, 0x8, 0x4, 0x8000000000000000, 0x2}, {0x3, 0x0, 0x8788, 0xf, 0xfffffffffffffffc, 0xe3, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x8001, 0x1000, 0x6, 0x23e4, 0x10000}, {0x0, 0x0, 0x1, 0x5, 0x2, 0x2, 0x4, 0x2000000000000003}, {0x1, 0x0, 0x0, 0x3, 0x6, 0x80000001, 0x20d3, 0x6a2164f6}], 0x7, 0x38, 0x1, 0x2}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.117688547s ago: executing program 5 (id=882): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) setresuid(0xee01, 0xee01, 0xee00) r3 = getpgid(0x0) prlimit64(r3, 0xe, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x20088c4) 396.806205ms ago: executing program 5 (id=883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r1) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xe, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) 163.439229ms ago: executing program 3 (id=884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x872f, 0x0, 0x7, 0x5, {{0x14, 0x4, 0x2, 0x3f, 0x50, 0x67, 0x0, 0x8, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@noop, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x6, [{@loopback, 0x6}, {@multicast1, 0x3}, {@local, 0x6}]}, @noop, @timestamp={0x44, 0x1c, 0xc4, 0x0, 0x2, [0x7, 0x5, 0x10, 0x8001, 0x3, 0x45]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000008b68f3705fc32d6035b84464357812b962d9112e1765bd0800000000000000a620798d83388740376d79ee3d4c5751c4aebfe45813f4b4c234c6a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r5}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000580)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000000000000000000001000000181100006cfe8834653d491b579406df376a8afba5d1c22aeaf9b82e03b07afecdd5bc73bcf7411f62", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_ublk_setup_io_uring(0x73af, &(0x7f00000005c0)={0x0, 0x507d, 0x40, 0x8, 0x285, 0x0, r11}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x0, 0x0, 0xb, 0x50, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x330c0, 0x0, 0x0, 0x41100, 0x32, '\x00', r1, @fallback=0x16, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0xe, 0x3, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r12], 0x0, 0x10, 0x7f}, 0x94) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 81.71984ms ago: executing program 5 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, 0x0, 0x40, 0xfe9fe02, 0x0, 0x0, 0x0, 0x5, 0x11, 0xff, 0x8000}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) socket$key(0xf, 0x3, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0xad) (async) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000200)=0x912, 0x4) (async) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000340), 0x1e) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async) r8 = userfaultfd(0x80001) fchdir(r5) (async) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) set_mempolicy(0x4000, &(0x7f0000000100)=0x80, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 0s ago: executing program 4 (id=886): userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8f, 0xec000000, 0xcd}]}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000fbf7d2252e00000008042c2cbf0444985663341b12fe0300144c5ba7726e781cbf1a8962bb5167a4c727b76270c071721e935b4a31f5be824b2d918ebbacb9bfa6b29637fde1e3cfb959bf8e452af21b298efb34f8af6b8c251cc3c324a330a8f74527bfd34ee71accecf4916d3e4631adbebb59e5f6ef4036fef339b6a00ca8", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100000400cc000400080104004900"], 0x34}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r21 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r21}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r14, @ANYRESOCT=r10, @ANYRES16=r7, @ANYRESDEC=r15, @ANYRES64=r19, @ANYRESDEC=r16, @ANYRESHEX=r18, @ANYBLOB="859f8a82de2f7ca17b5d9fe3e90e7a8f357f3131cd7abb526f0167678cb551d585c23b4b97ebe8b8a295ba6bedf76de9870b106f6dbaca6794f3fe08e79f4021027d8aa00143d2323c5c430ef49efa30dffea01a87102c863b05590cdbde19f470ea6b6d4cb7af5865a5fd74cf35ac4a7b92786e19f80e7bf8f6074fac6391d0e6fdaf844e408899e4c2b0418409b9e2321b0103d0b98fb11ecfc98009378e6adc1721d7641f7d55f5e5ad1ff40e2e8721477fa536de7f883fbc04392a00dda1b454cb1ca0906876f4b0ee01e1e14981c7e5fa6eefb1caeb18400e19fba1afc275a3bdbc3be1db38a7258d11d2", @ANYRESOCT=r17, @ANYRESHEX=r21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610700000000000000070000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r20, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r12}, './sec/tomoyo/profile\x00'}) r22 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 3] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 141.294116][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.315367][ T5703] usb 5-1: Product: syz [ 141.323969][ T5703] usb 5-1: Manufacturer: syz [ 141.328894][ T5703] usb 5-1: SerialNumber: syz [ 141.343993][ T30] audit: type=1400 audit(1785676686.891:492): avc: denied { write } for pid=7022 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.405798][ T7026] Illegal XDP return value 4294967274 on prog (id 49) dev N/A, expect packet loss! [ 141.581483][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.606110][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.006999][ T7037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.329'. [ 142.402542][ T7041] ceph: Unknown parameter 'addr' [ 142.633967][ T7047] rdma_rxe: rxe_newlink: failed to add lo [ 142.769447][ T30] audit: type=1400 audit(1785676688.191:493): avc: denied { connect } for pid=7040 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.906564][ T30] audit: type=1400 audit(1785676688.191:494): avc: denied { write } for pid=7040 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.607573][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.821149][ T5703] usb 5-1: USB disconnect, device number 10 [ 144.895936][ T30] audit: type=1400 audit(1785676690.441:495): avc: denied { execute } for pid=7083 comm="syz.4.343" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.932145][ T30] audit: type=1400 audit(1785676690.441:496): avc: denied { execute_no_trans } for pid=7083 comm="syz.4.343" path="/57/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.958366][ T30] audit: type=1400 audit(1785676690.451:497): avc: denied { read } for pid=7083 comm="syz.4.343" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 145.001983][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 145.126352][ T7096] ceph: Unknown parameter 'addr' [ 145.465971][ T7106] rdma_rxe: rxe_newlink: failed to add lo [ 145.531339][ T30] audit: type=1400 audit(1785676690.871:498): avc: denied { create } for pid=7104 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.589195][ T7105] netlink: 80 bytes leftover after parsing attributes in process `syz.1.348'. [ 146.972844][ T7129] JFS: discard option not supported on device [ 146.993316][ T7129] Mount JFS Failure: -5 [ 146.998543][ T7134] lo speed is unknown, defaulting to 1000 [ 147.009090][ T7129] jfs_mount failed w/return code = -5 [ 147.018088][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.028598][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.030241][ T30] audit: type=1400 audit(1785676692.551:499): avc: denied { ioctl } for pid=7135 comm="syz-executor" path="socket:[14067]" dev="sockfs" ino=14067 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.067625][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.109717][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.122908][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.171519][ T30] audit: type=1400 audit(1785676692.711:500): avc: denied { module_request } for pid=7135 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.199479][ T5703] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.395517][ T5703] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 147.441234][ T5703] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 147.477517][ T5703] usb 5-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 147.512969][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.524579][ T5703] usb 5-1: Product: syz [ 147.545133][ T5703] usb 5-1: Manufacturer: syz [ 147.559791][ T5703] usb 5-1: SerialNumber: syz [ 147.962735][ T7155] 9p: Bad value for 'debug' [ 147.969642][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.979570][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.990359][ T7155] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 147.991215][ T30] audit: type=1400 audit(1785676693.541:501): avc: denied { ioctl } for pid=7131 comm="syz.4.356" path="socket:[14720]" dev="sockfs" ino=14720 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.114221][ T30] audit: type=1400 audit(1785676693.601:502): avc: denied { setopt } for pid=7156 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.540609][ T30] audit: type=1400 audit(1785676693.851:503): avc: denied { append } for pid=7162 comm="syz.0.361" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.629793][ T30] audit: type=1400 audit(1785676693.951:504): avc: denied { mount } for pid=7162 comm="syz.0.361" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 148.632800][ T7135] lo speed is unknown, defaulting to 1000 [ 148.931011][ T7173] ceph: Unknown parameter 'addr' [ 148.936855][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 149.498468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.578572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.688463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 149.777168][ T4928] Bluetooth: hci5: command tx timeout [ 149.935278][ T5703] usb 5-1: USB disconnect, device number 11 [ 150.080243][ T7176] rdma_rxe: rxe_newlink: failed to add lo [ 150.378922][ T5703] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 150.641191][ T5703] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.651973][ T5703] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 150.670515][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 150.704205][ T5703] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.780217][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.154576][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.161935][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.169552][ T7135] bridge_slave_0: entered allmulticast mode [ 151.177410][ T7135] bridge_slave_0: entered promiscuous mode [ 151.187359][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.194680][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.202228][ T7135] bridge_slave_1: entered allmulticast mode [ 151.227684][ T7135] bridge_slave_1: entered promiscuous mode [ 151.290882][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 151.290899][ T30] audit: type=1400 audit(1785676696.841:507): avc: denied { ioctl } for pid=7183 comm="syz.4.366" path="socket:[14857]" dev="sockfs" ino=14857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.707756][ T30] audit: type=1400 audit(1785676697.221:508): avc: denied { bind } for pid=7183 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.735274][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.759887][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.774035][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 151.803786][ T30] audit: type=1400 audit(1785676697.351:509): avc: denied { write } for pid=7183 comm="syz.4.366" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.814490][ T7135] team0: Port device team_slave_0 added [ 151.829729][ T4928] Bluetooth: hci5: command tx timeout [ 152.065446][ T7135] team0: Port device team_slave_1 added [ 152.287084][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.304679][ T30] audit: type=1400 audit(1785676697.851:510): avc: denied { connect } for pid=7228 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.307298][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.373729][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.393492][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.401753][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.428316][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.499512][ T30] audit: type=1400 audit(1785676698.051:511): avc: denied { read } for pid=7239 comm="syz.0.382" name="/" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.506915][ T7135] hsr_slave_0: entered promiscuous mode [ 152.528342][ T7135] hsr_slave_1: entered promiscuous mode [ 152.539891][ T30] audit: type=1400 audit(1785676698.071:512): avc: denied { read open } for pid=7239 comm="syz.0.382" path="/70/config" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.543433][ T7135] debugfs: 'hsr0' already exists in 'hsr' [ 152.563315][ T30] audit: type=1400 audit(1785676698.071:513): avc: denied { read } for pid=7239 comm="syz.0.382" name="g1" dev="configfs" ino=10093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 152.593919][ T7135] Cannot create hsr debugfs directory [ 152.662139][ T30] audit: type=1326 audit(1785676698.211:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.1.384" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae9f9e019 code=0x7ffc0000 [ 152.697138][ T30] audit: type=1326 audit(1785676698.241:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.1.384" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4ae9f9e019 code=0x7ffc0000 [ 152.731621][ T30] audit: type=1326 audit(1785676698.241:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.1.384" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae9f9e019 code=0x7ffc0000 [ 152.759151][ T7252] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.994663][ T7135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.996580][ T9] usb 5-1: USB disconnect, device number 12 [ 153.026195][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.042175][ T7135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.056360][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.076044][ T7135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.087297][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.106084][ T7135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.120559][ T7135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.308952][ T7256] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.331781][ T7256] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.392004][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.425285][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.443821][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.450942][ T7101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.511511][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.518698][ T7102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.598728][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.718421][ T7290] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 153.750277][ T7290] netlink: 156 bytes leftover after parsing attributes in process `syz.3.392'. [ 153.769225][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 153.786756][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 153.829440][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 153.855093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.864936][ T9] usb 2-1: Product: syz [ 153.878510][ T9] usb 2-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 153.915147][ T186] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 153.924357][ T4928] Bluetooth: hci5: command tx timeout [ 153.933852][ T9] usb 2-1: SerialNumber: syz [ 154.001768][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 154.037055][ T7296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7296 comm=syz.3.393 [ 154.080501][ T186] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 154.110665][ T186] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 154.134104][ T186] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 154.172958][ T9] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 154.195207][ T186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.203723][ T9] usb 2-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 154.213723][ T186] usb 5-1: Product: syz [ 154.217918][ T186] usb 5-1: Manufacturer: syz [ 154.229645][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 154.236799][ T186] usb 5-1: SerialNumber: syz [ 154.242576][ T9] usb 2-1: 2:1 : invalid channels 0 [ 154.316846][ T9] usb 2-1: USB disconnect, device number 10 [ 154.433668][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.481932][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.496696][ T186] usb 5-1: Unsupported UAC3 BADD profile [ 154.566743][ T186] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 154.590317][ T186] usb 5-1: USB disconnect, device number 13 [ 154.631671][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.908187][ T7135] veth0_vlan: entered promiscuous mode [ 154.932637][ T7135] veth1_vlan: entered promiscuous mode [ 154.969241][ T7135] veth0_macvtap: entered promiscuous mode [ 154.981583][ T7135] veth1_macvtap: entered promiscuous mode [ 155.007723][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.044057][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.244956][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.255675][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.296399][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.306224][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.314172][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.314209][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.314238][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.314265][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.668586][ T186] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.808644][ T186] usb 6-1: device descriptor read/64, error -71 [ 155.892307][ T5711] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 156.026849][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 156.047603][ T4928] Bluetooth: hci5: command tx timeout [ 156.230162][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 156.250405][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.265019][ T5711] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.275369][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.286554][ T5711] usb 5-1: config 0 descriptor?? [ 156.295781][ T7327] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 156.298966][ T186] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.440458][ T186] usb 6-1: device descriptor read/64, error -71 [ 156.549647][ T186] usb usb6-port1: attempt power cycle [ 156.766479][ T5711] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 156.781953][ T5711] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 156.928533][ T186] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.959481][ T186] usb 6-1: device descriptor read/8, error -71 [ 156.986469][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 156.986490][ T30] audit: type=1400 audit(1785676702.531:610): avc: denied { ioctl } for pid=7326 comm="syz.4.399" path="socket:[15635]" dev="sockfs" ino=15635 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.077687][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.100838][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.124322][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.151561][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.192321][ T5711] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 157.211718][ T5711] microsoft 0003:045E:07DA.0002: no inputs found [ 157.228652][ T186] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 157.237350][ T5711] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 157.288849][ T5711] usb 5-1: USB disconnect, device number 14 [ 157.300342][ T186] usb 6-1: device descriptor read/8, error -71 [ 157.420655][ T186] usb usb6-port1: unable to enumerate USB device [ 157.491867][ T7347] fido_id[7347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 158.146478][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 158.154238][ T7351] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.156381][ T7357] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 158.173363][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 158.188722][ T7351] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 159.056805][ T30] audit: type=1400 audit(1785676704.601:611): avc: denied { read } for pid=7367 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.526130][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.555690][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.885216][ T186] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.895836][ T7386] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.973837][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 160.343023][ T186] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.352080][ T186] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.362737][ T186] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.375107][ T186] usb 6-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 160.389662][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.397777][ T186] usb 6-1: Product: syz [ 160.402171][ T186] usb 6-1: Manufacturer: syz [ 160.406879][ T186] usb 6-1: SerialNumber: syz [ 160.621679][ T30] audit: type=1400 audit(1785676706.161:612): avc: denied { map } for pid=7375 comm="syz.5.411" path="socket:[16579]" dev="sockfs" ino=16579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.675567][ T186] usb 6-1: unit 3 not found! [ 160.688694][ T30] audit: type=1400 audit(1785676706.191:613): avc: denied { read } for pid=7375 comm="syz.5.411" path="socket:[16579]" dev="sockfs" ino=16579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.803161][ T186] usb 6-1: USB disconnect, device number 6 [ 161.019089][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.388354][ T30] audit: type=1400 audit(1785676706.931:614): avc: denied { connect } for pid=7419 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.417716][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'. [ 163.137405][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 163.439142][ T30] audit: type=1400 audit(1785676708.991:615): avc: denied { listen } for pid=7442 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.831666][ T30] audit: type=1400 audit(1785676709.371:616): avc: denied { name_connect } for pid=7452 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 163.861393][ T186] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.977920][ T30] audit: type=1400 audit(1785676709.521:617): avc: denied { listen } for pid=7452 comm="syz.0.433" lport=55690 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.033335][ T186] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.053176][ T186] usb 2-1: config 0 has no interface number 0 [ 164.078126][ T186] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.104068][ T186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.124327][ T186] usb 2-1: Product: syz [ 164.134610][ T186] usb 2-1: Manufacturer: syz [ 164.144288][ T186] usb 2-1: SerialNumber: syz [ 164.299190][ T186] usb 2-1: config 0 descriptor?? [ 164.551755][ T186] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 164.579613][ T7450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.632020][ T7450] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.781900][ T186] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.902001][ T186] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 164.981115][ T186] usb 2-1: media controller created [ 165.018024][ T186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.048541][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.090208][ T186] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 165.153449][ T5703] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 165.176417][ T186] usb 2-1: USB disconnect, device number 11 [ 165.219258][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 165.235568][ T30] audit: type=1400 audit(1785676710.781:618): avc: denied { getopt } for pid=7468 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.245014][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 165.285916][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 165.290690][ T5703] usb 5-1: device descriptor read/64, error -71 [ 165.296021][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.323674][ T9] usb 6-1: Product: syz [ 165.340706][ T9] usb 6-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 165.448275][ T9] usb 6-1: SerialNumber: syz [ 165.509708][ T7478] comedi comedi0: aio_aio12_8: I/O base address not correctly aligned [ 165.558626][ T5703] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 165.699136][ T9] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 165.710033][ T5703] usb 5-1: device descriptor read/64, error -71 [ 165.728068][ T9] usb 6-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 165.751019][ T9] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 165.775571][ T9] usb 6-1: 2:1 : invalid channels 0 [ 165.848966][ T5703] usb usb5-port1: attempt power cycle [ 165.866786][ T9] usb 6-1: USB disconnect, device number 7 [ 165.960210][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.188654][ T5703] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 166.208248][ T30] audit: type=1400 audit(1785676711.751:619): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 166.262143][ T5703] usb 5-1: device descriptor read/8, error -71 [ 166.432511][ T7496] syz_tun: entered allmulticast mode [ 166.457250][ T7496] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 166.467713][ T7496] mroute: pending queue full, dropping entries [ 166.508835][ T5703] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 166.550530][ T7491] syz_tun: left allmulticast mode [ 166.562481][ T5703] usb 5-1: device descriptor read/8, error -71 [ 167.005295][ T7505] lo speed is unknown, defaulting to 1000 [ 167.049026][ T5703] usb usb5-port1: unable to enumerate USB device [ 167.619674][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.700454][ T5703] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 167.802848][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.842072][ T29] usb 6-1: config 0 has no interface number 0 [ 167.868885][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 167.895594][ T29] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 167.915511][ T5703] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 167.930883][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.942800][ T5703] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 167.960333][ T29] usb 6-1: Product: syz [ 167.974568][ T29] usb 6-1: Manufacturer: syz [ 167.982630][ T5703] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.002112][ T29] usb 6-1: SerialNumber: syz [ 168.025149][ T5703] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 168.052754][ T5703] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 168.083097][ T29] usb 6-1: config 0 descriptor?? [ 168.120153][ T5703] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.156950][ T5703] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.187404][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.294443][ T29] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 168.362386][ T29] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.375031][ T7540] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 168.388464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.442213][ T5703] usb 5-1: GET_CAPABILITIES returned 0 [ 168.452459][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 168.474287][ T5703] usbtmc 5-1:16.0: can't read capabilities [ 168.490908][ T29] usb 6-1: media controller created [ 168.562856][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.650777][ T29] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 168.687613][ T5703] usb 5-1: USB disconnect, device number 19 [ 168.797347][ T29] usb 6-1: USB disconnect, device number 8 [ 168.823349][ T186] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.994735][ T30] audit: type=1800 audit(1785676714.531:620): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.460" name="SYSV798dd820" dev="hugetlbfs" ino=0 res=0 errno=0 [ 168.999950][ T186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.069503][ T186] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 169.105259][ T186] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 169.145463][ T186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.196723][ T186] usb 2-1: config 0 descriptor?? [ 169.216687][ T7554] ceph: Unknown parameter 'addr' [ 169.498523][ T7561] rdma_rxe: rxe_newlink: failed to add lo [ 169.667210][ T186] Bluetooth: Can't get state to change to load ram patch err [ 169.837355][ T186] Bluetooth: Loading patch file failed [ 169.865672][ T186] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 169.894183][ T186] usb 2-1: USB disconnect, device number 12 [ 169.916094][ T7102] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.673386][ T7563] rdma_rxe: rxe_newlink: failed to add lo [ 171.921947][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'. [ 172.111755][ T7576] lo speed is unknown, defaulting to 1000 [ 172.790141][ T7588] netlink: 388 bytes leftover after parsing attributes in process `syz.0.469'. [ 173.544895][ T30] audit: type=1400 audit(1785676719.091:621): avc: denied { ioctl } for pid=7598 comm="syz.4.473" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.680783][ T7590] mmap: syz.5.471 (7590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.792827][ T7608] ceph: Unknown parameter 'addr' [ 173.793896][ T30] audit: type=1400 audit(1785676719.341:622): avc: denied { listen } for pid=7605 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.858593][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.973797][ T30] audit: type=1400 audit(1785676719.371:623): avc: denied { connect } for pid=7605 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 174.054526][ T7611] ucma_write: process 275 (syz.0.476) changed security contexts after opening file descriptor, this is not allowed. [ 174.079947][ T7610] rdma_rxe: rxe_newlink: failed to add lo [ 174.207593][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 174.269123][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 174.326461][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 174.471630][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.519809][ T30] audit: type=1400 audit(1785676720.061:624): avc: denied { ioctl } for pid=7614 comm="syz.3.477" path="socket:[16064]" dev="sockfs" ino=16064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.647844][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 175.015848][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.029346][ T9] usb 2-1: config 0 descriptor?? [ 175.518827][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 175.538095][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.586246][ T9] usb 2-1: USB disconnect, device number 13 [ 175.778458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.278463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.338461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.398460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.458459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 177.473759][ T7649] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 178.048504][ T186] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.221608][ T186] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.243099][ T186] usb 6-1: config 0 has no interface number 0 [ 178.265329][ T186] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 178.285703][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.293992][ T186] usb 6-1: Product: syz [ 178.298270][ T186] usb 6-1: Manufacturer: syz [ 178.303792][ T186] usb 6-1: SerialNumber: syz [ 178.318952][ T186] usb 6-1: config 0 descriptor?? [ 178.437305][ T30] audit: type=1400 audit(1785676723.971:625): avc: denied { ioctl } for pid=7660 comm="syz.1.488" path="socket:[16111]" dev="sockfs" ino=16111 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.525729][ T30] audit: type=1400 audit(1785676724.071:626): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.577084][ T186] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 178.654230][ T186] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 178.703483][ T186] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 178.737677][ T186] usb 6-1: media controller created [ 178.776012][ T7668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.783564][ T186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.968828][ T186] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 179.179003][ T30] audit: type=1400 audit(1785676724.621:627): avc: denied { append } for pid=7669 comm="syz.0.491" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.274226][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.295740][ T30] audit: type=1400 audit(1785676724.631:628): avc: denied { ioctl } for pid=7669 comm="syz.0.491" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.310472][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.332821][ T186] usb 6-1: USB disconnect, device number 9 [ 179.342578][ T30] audit: type=1400 audit(1785676724.681:629): avc: denied { write } for pid=7669 comm="syz.0.491" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.460489][ T7679] ceph: Unknown parameter 'addr' [ 179.965788][ T7682] rdma_rxe: rxe_newlink: failed to add lo [ 180.157391][ T7685] lo speed is unknown, defaulting to 1000 [ 180.500019][ T30] audit: type=1400 audit(1785676726.001:630): avc: denied { getopt } for pid=7689 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.623743][ T30] audit: type=1400 audit(1785676726.151:631): avc: denied { append } for pid=7689 comm="syz.4.498" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.843083][ T186] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 180.873239][ T186] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 180.942931][ T7692] lo speed is unknown, defaulting to 1000 [ 181.407882][ T5718] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 181.632783][ T7698] ceph: No mds server is up or the cluster is laggy [ 182.021070][ T5718] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.048665][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 182.189739][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 182.203869][ T5718] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.216922][ T5718] usb 2-1: config 0 has no interface number 0 [ 182.225800][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 182.237095][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 182.251004][ T5718] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 182.260097][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.268078][ T5718] usb 2-1: Product: syz [ 182.272481][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 182.279802][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 182.289655][ T5718] usb 2-1: Manufacturer: syz [ 182.294452][ T5718] usb 2-1: SerialNumber: syz [ 182.299276][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.311609][ T5718] usb 2-1: config 0 descriptor?? [ 182.318456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.336809][ T9] usb 6-1: config 0 descriptor?? [ 182.351577][ T5718] usb 2-1: selecting invalid altsetting 1 [ 182.368242][ T5718] dvb_ttusb_budget: ttusb_init_controller: error [ 182.375497][ T5718] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 182.422695][ T30] audit: type=1400 audit(1785676727.971:632): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 182.490131][ T5718] DVB: Unable to find symbol stv0299_attach() [ 182.587766][ T5718] DVB: Unable to find symbol tda8083_attach() [ 182.603360][ T5718] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 182.765973][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 182.784264][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 182.804401][ T9] usb 6-1: USB disconnect, device number 10 [ 183.025193][ T5719] usb 2-1: USB disconnect, device number 14 [ 183.195020][ T7726] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 183.331939][ T7729] FAULT_INJECTION: forcing a failure. [ 183.331939][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.363442][ T7729] CPU: 0 UID: 0 PID: 7729 Comm: syz.4.506 Not tainted syzkaller #0 PREEMPT(full) [ 183.363468][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.363478][ T7729] Call Trace: [ 183.363484][ T7729] [ 183.363491][ T7729] dump_stack_lvl+0x100/0x190 [ 183.363523][ T7729] should_fail_ex.cold+0x5/0xa [ 183.363544][ T7729] _copy_from_user+0x2e/0xd0 [ 183.363568][ T7729] io_register_clone_buffers+0xda/0xa40 [ 183.363590][ T7729] ? __mutex_lock+0x26d/0x1bd0 [ 183.363611][ T7729] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 183.363636][ T7729] ? find_held_lock+0x2b/0x80 [ 183.363651][ T7729] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 183.363670][ T7729] ? __fget_files+0x215/0x3d0 [ 183.363699][ T7729] __do_sys_io_uring_register+0x340/0x1bc0 [ 183.363720][ T7729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.363740][ T7729] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 183.363758][ T7729] ? __fget_files+0x21f/0x3d0 [ 183.363779][ T7729] ? fput+0x79/0x100 [ 183.363797][ T7729] ? ksys_write+0x1ac/0x250 [ 183.363822][ T7729] ? __pfx_ksys_write+0x10/0x10 [ 183.363854][ T7729] do_syscall_64+0x115/0x870 [ 183.363873][ T7729] ? clear_bhb_loop+0x40/0x90 [ 183.363893][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.363910][ T7729] RIP: 0033:0x7f1d6779e019 [ 183.363924][ T7729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.363939][ T7729] RSP: 002b:00007f1d68649028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 183.363957][ T7729] RAX: ffffffffffffffda RBX: 00007f1d67a25fa0 RCX: 00007f1d6779e019 [ 183.363967][ T7729] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000004 [ 183.363977][ T7729] RBP: 00007f1d68649090 R08: 0000000000000000 R09: 0000000000000000 [ 183.363986][ T7729] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 183.363996][ T7729] R13: 00007f1d67a26038 R14: 00007f1d67a25fa0 R15: 00007ffd175b6dc8 [ 183.364018][ T7729] [ 183.929127][ T5703] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 183.977789][ T30] audit: type=1400 audit(1785676729.521:633): avc: denied { setopt } for pid=7732 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.294433][ T30] audit: type=1400 audit(1785676729.531:634): avc: denied { read } for pid=7732 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.313582][ T5726] usb 1-1: Failed to early initialize device [ 184.339281][ T7733] tls_set_device_offload: netdev not found [ 184.375607][ T5726] usb 1-1: USB disconnect, device number 3 [ 184.422891][ T5703] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.472332][ T5703] usb 5-1: config 0 has no interface number 0 [ 184.509292][ T5703] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 184.516195][ T7733] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 184.605440][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.625243][ T5703] usb 5-1: Product: syz [ 184.630439][ T5703] usb 5-1: Manufacturer: syz [ 184.635458][ T5703] usb 5-1: SerialNumber: syz [ 184.644840][ T5703] usb 5-1: config 0 descriptor?? [ 184.728781][ T30] audit: type=1400 audit(1785676730.281:635): avc: denied { mounton } for pid=7741 comm="syz.5.510" path="/20/file0" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 184.749604][ T7742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.823611][ T7733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.841731][ T7745] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.876640][ T5703] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 184.933976][ T7736] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 184.946959][ T5703] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.980974][ T5703] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 185.030103][ T5703] usb 5-1: media controller created [ 185.152558][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.295368][ T5703] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 185.403286][ T30] audit: type=1400 audit(1785676730.931:636): avc: denied { write } for pid=7753 comm="syz.0.513" path="socket:[17581]" dev="sockfs" ino=17581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.503178][ T30] audit: type=1400 audit(1785676730.951:637): avc: denied { create } for pid=7758 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.522224][ T5703] usb 5-1: USB disconnect, device number 20 [ 185.526001][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 185.589282][ T30] audit: type=1400 audit(1785676731.031:638): avc: denied { ioctl } for pid=7758 comm="syz.1.515" path="socket:[16332]" dev="sockfs" ino=16332 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.647111][ T30] audit: type=1400 audit(1785676731.041:639): avc: denied { read write } for pid=7758 comm="syz.1.515" dev="sockfs" ino=16332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.741481][ T7763] team0: Port device team_slave_1 removed [ 185.754109][ T30] audit: type=1400 audit(1785676731.221:640): avc: denied { unmount } for pid=7135 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 185.928630][ T7769] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.518'. [ 185.970380][ T7769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.518'. [ 186.196247][ T7777] xt_hashlimit: size too large, truncated to 1048576 [ 187.087723][ T7782] x9: renamed from bridge_slave_0 (while UP) [ 187.734392][ T7798] capability: warning: `syz.1.525' uses deprecated v2 capabilities in a way that may be insecure [ 188.681257][ T7805] lo speed is unknown, defaulting to 1000 [ 190.080615][ T7831] pim6reg: entered allmulticast mode [ 190.132935][ T30] audit: type=1400 audit(1785676735.681:641): avc: denied { block_suspend } for pid=7822 comm="syz.0.534" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.134006][ T7832] pim6reg: left allmulticast mode [ 190.455392][ T7850] SET target dimension over the limit! [ 190.569803][ T7839] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.689714][ T7839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.788751][ T5718] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 191.000873][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 191.046843][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.068532][ T5719] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 191.126956][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.177469][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.268606][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 191.281171][ T5718] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.346227][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.355904][ T5719] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 191.370316][ T5719] usb 6-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 191.379726][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.392684][ T5719] usb 6-1: Product: syz [ 191.397690][ T5718] usb 2-1: config 0 descriptor?? [ 191.410710][ T5719] usb 6-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 191.442691][ T5719] usb 6-1: SerialNumber: syz [ 191.682940][ T5719] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 191.718741][ T5719] usb 6-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 191.727922][ T5719] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 191.760809][ T5719] usb 6-1: 2:1 : invalid channels 0 [ 191.903488][ T5719] usb 6-1: USB disconnect, device number 11 [ 191.943674][ T5718] microsoft 0003:045E:07DA.0003: invalid report_size -689550366 [ 191.977021][ T5718] microsoft 0003:045E:07DA.0003: item 0 4 1 7 parsing failed [ 191.997704][ T5718] microsoft 0003:045E:07DA.0003: parse failed [ 192.010923][ T5718] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 192.061213][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.659191][ T5704] usb 2-1: USB disconnect, device number 15 [ 192.942310][ T7865] fuse: Bad value for 'group_id' [ 192.960012][ T7865] fuse: Bad value for 'group_id' [ 193.881037][ T7888] ceph: Unknown parameter 'addr' [ 193.910751][ T7888] netlink: 'syz.0.554': attribute type 61 has an invalid length. [ 193.986690][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.228978][ T7898] rdma_rxe: rxe_newlink: failed to add lo [ 195.329408][ T30] audit: type=1400 audit(1785676740.881:642): avc: denied { execute } for pid=7905 comm="syz.3.558" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.350393][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.558'. [ 195.404982][ T7906] tipc: Invalid UDP bearer configuration [ 195.405060][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 195.459565][ T7891] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.495886][ T7891] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 195.573656][ T30] audit: type=1400 audit(1785676741.121:643): avc: denied { ioctl } for pid=7908 comm="syz.5.560" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.798932][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 195.959083][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 195.983859][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 196.025144][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 196.049953][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.070290][ T24] usb 5-1: Product: syz [ 196.078585][ T24] usb 5-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 196.238934][ T24] usb 5-1: SerialNumber: syz [ 197.578489][ T24] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 197.753575][ T24] usb 5-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 197.784150][ T24] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 197.797507][ T24] usb 5-1: 2:1 : invalid channels 0 [ 198.078932][ T24] usb 5-1: USB disconnect, device number 21 [ 198.134262][ T30] audit: type=1400 audit(1785676743.681:644): avc: denied { listen } for pid=7958 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.245839][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.253798][ T7976] lo speed is unknown, defaulting to 1000 [ 199.423694][ T5726] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 199.623696][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.400199][ T5726] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.420975][ T5726] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.424703][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 200.456103][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.466458][ T24] usb 5-1: Product: syz [ 200.466724][ T5726] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.471270][ T24] usb 5-1: Manufacturer: syz [ 200.487396][ T24] usb 5-1: SerialNumber: syz [ 200.528815][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.571882][ T7959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.614401][ T5726] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.915198][ T5726] usb 2-1: USB disconnect, device number 16 [ 201.546005][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 201.889250][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.108008][ T24] usb 5-1: USB disconnect, device number 22 [ 202.273713][ T8006] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.288334][ T8006] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.593333][ T8017] netlink: 'syz.3.589': attribute type 18 has an invalid length. [ 203.165208][ T5718] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.206638][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.528489][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 203.546932][ T5718] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 203.572897][ T5718] usb 2-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 203.582912][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.588481][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.605854][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.611953][ T30] audit: type=1400 audit(1785676749.161:645): avc: denied { mounton } for pid=8038 comm="syz.0.594" path="/proc/377/cgroup" dev="proc" ino=18385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 203.615512][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 203.647076][ T5718] usb 2-1: Product: syz [ 203.647097][ T5718] usb 2-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 203.647127][ T5718] usb 2-1: SerialNumber: syz [ 203.650705][ T7102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.798698][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 203.823675][ T24] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 203.858301][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.881158][ T24] usb 5-1: Product: syz [ 203.891270][ T24] usb 5-1: Manufacturer: syz [ 203.903160][ T24] usb 5-1: SerialNumber: syz [ 203.927163][ T24] usb 5-1: config 0 descriptor?? [ 203.967222][ T5718] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 203.986712][ T5718] usb 2-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 204.006448][ T5718] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 204.023813][ T5718] usb 2-1: 2:1 : invalid channels 0 [ 204.072329][ T5718] usb 2-1: USB disconnect, device number 17 [ 204.118645][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 204.148073][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.177191][ T8056] ceph: Unknown parameter 'addr' [ 204.190409][ T8056] netlink: 'syz.3.600': attribute type 61 has an invalid length. [ 204.434528][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 204.447070][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.511057][ T8061] rdma_rxe: rxe_newlink: failed to add lo [ 204.680398][ T9] usb 6-1: Product: syz [ 204.689315][ T9] usb 6-1: Manufacturer: syz [ 204.698336][ T9] usb 6-1: SerialNumber: syz [ 204.942883][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.050863][ T5719] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 205.113221][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'. [ 205.144274][ T9] usb 6-1: USB disconnect, device number 12 [ 205.242692][ T5719] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 205.284443][ T5719] usb 1-1: config 1 has no interface number 0 [ 205.317664][ T5719] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 205.334999][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.379608][ T5719] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.535833][ T5719] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.613116][ T5719] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 205.649950][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.691945][ T5719] usb 1-1: Product: syz [ 205.697531][ T24] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 205.868515][ T5719] usb 1-1: Manufacturer: syz [ 205.893081][ T5719] usb 1-1: SerialNumber: syz [ 206.129990][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 206.153616][ T8063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.252831][ T24] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 206.291729][ T24] usb 5-1: USB disconnect, device number 23 [ 206.558113][ T8063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.064055][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 207.106780][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 207.186675][ T5719] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 207.414331][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.611'. [ 207.430779][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.455892][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 207.536131][ T30] audit: type=1400 audit(1785676753.081:646): avc: denied { write } for pid=8100 comm="syz.1.612" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 209.066432][ T5719] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 209.100765][ T5719] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 209.144050][ T5719] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 209.185143][ T5719] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 209.233665][ T5719] usb 1-1: USB disconnect, device number 4 [ 209.260886][ T5719] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 209.600916][ T8124] binder: 8120:8124 ioctl c018620c 2000000004c0 returned -1 [ 210.247382][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.618'. [ 210.336018][ T30] audit: type=1400 audit(1785676755.071:647): avc: denied { execute } for pid=8120 comm="syz.0.620" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.779766][ T5719] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 210.975411][ T8141] CIFS: bad ip= option (1270.0.1) [ 211.009675][ T8141] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 211.103048][ T8141] CIFS: Attempting to mount (null) [ 211.193906][ T8141] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.204691][ T8141] CIFS: VFS: cifs_mount failed w/return code = -111 [ 211.229194][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.520032][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 211.643313][ T24] usb 1-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 211.721198][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 211.802173][ T24] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 211.828277][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.856074][ T24] usb 1-1: Product: syz [ 211.877827][ T24] usb 1-1: Manufacturer: syz [ 211.894744][ T24] usb 1-1: SerialNumber: syz [ 211.917404][ T24] usb 1-1: config 0 descriptor?? [ 211.961241][ T30] audit: type=1400 audit(1785676757.481:648): avc: denied { mount } for pid=8157 comm="syz.1.628" name="/" dev="ramfs" ino=19850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 211.992258][ T24] cdc_ether 1-1:0.0: Descriptor too short [ 212.033232][ T30] audit: type=1400 audit(1785676757.511:649): avc: denied { write } for pid=8138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.048596][ T24] usb 1-1: unsupported MDLM descriptors [ 212.120705][ T30] audit: type=1400 audit(1785676757.651:650): avc: denied { mounton } for pid=8157 comm="syz.1.628" path="/file0" dev="ramfs" ino=19855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 212.186026][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.199379][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.263574][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.271492][ T8177] syz.5.632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.285483][ T30] audit: type=1400 audit(1785676757.831:651): avc: denied { write } for pid=8173 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.288962][ T8177] CPU: 1 UID: 0 PID: 8177 Comm: syz.5.632 Not tainted syzkaller #0 PREEMPT(full) [ 212.288986][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.288997][ T8177] Call Trace: [ 212.289003][ T8177] [ 212.289010][ T8177] dump_stack_lvl+0x100/0x190 [ 212.289037][ T8177] warn_alloc.cold+0x94/0xa8 [ 212.289054][ T8177] ? __pfx_warn_alloc+0x10/0x10 [ 212.289069][ T8177] ? register_lock_class+0x40/0x560 [ 212.289093][ T8177] ? kasan_save_stack+0x3f/0x50 [ 212.289112][ T8177] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 212.289136][ T8177] ? xskq_create+0x52/0x1d0 [ 212.289151][ T8177] ? xsk_setsockopt+0x743/0xab0 [ 212.289165][ T8177] ? do_sock_setsockopt+0xf3/0x1d0 [ 212.289187][ T8177] ? __sys_setsockopt+0x195/0x220 [ 212.289205][ T8177] ? __x64_sys_setsockopt+0xbd/0x160 [ 212.289224][ T8177] ? do_syscall_64+0x115/0x870 [ 212.289244][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.289264][ T8177] ? xskq_create+0xfb/0x1d0 [ 212.289281][ T8177] __vmalloc_node_range_noprof+0x136c/0x1630 [ 212.289312][ T8177] ? xskq_create+0xfb/0x1d0 [ 212.289335][ T8177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.289361][ T8177] ? kasan_save_track+0x14/0x30 [ 212.289379][ T8177] ? __kasan_kmalloc+0xaa/0xb0 [ 212.289398][ T8177] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 212.289423][ T8177] ? xskq_create+0xfb/0x1d0 [ 212.289439][ T8177] vmalloc_user_noprof+0x9e/0xe0 [ 212.289468][ T8177] ? xskq_create+0xfb/0x1d0 [ 212.289485][ T8177] xskq_create+0xfb/0x1d0 [ 212.289503][ T8177] xsk_setsockopt+0x743/0xab0 [ 212.289521][ T8177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.289536][ T8177] ? find_held_lock+0x2b/0x80 [ 212.289550][ T8177] ? __fget_files+0x215/0x3d0 [ 212.289570][ T8177] ? selinux_socket_setsockopt+0x6a/0x80 [ 212.289594][ T8177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.289611][ T8177] do_sock_setsockopt+0xf3/0x1d0 [ 212.289636][ T8177] __sys_setsockopt+0x195/0x220 [ 212.289660][ T8177] __x64_sys_setsockopt+0xbd/0x160 [ 212.289683][ T8177] ? do_syscall_64+0x90/0x870 [ 212.289701][ T8177] ? lockdep_hardirqs_on+0x78/0x100 [ 212.289720][ T8177] do_syscall_64+0x115/0x870 [ 212.289737][ T8177] ? clear_bhb_loop+0x40/0x90 [ 212.289756][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.289772][ T8177] RIP: 0033:0x7feb5d19e019 [ 212.289786][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.289802][ T8177] RSP: 002b:00007feb5e05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.289819][ T8177] RAX: ffffffffffffffda RBX: 00007feb5d425fa0 RCX: 00007feb5d19e019 [ 212.289830][ T8177] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 212.289839][ T8177] RBP: 00007feb5d23500c R08: 0000000000000029 R09: 0000000000000000 [ 212.289849][ T8177] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.289859][ T8177] R13: 00007feb5d426038 R14: 00007feb5d425fa0 R15: 00007fff2d06ba18 [ 212.289881][ T8177] [ 212.289962][ T8177] Mem-Info: [ 212.394585][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.399908][ T5703] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 212.416756][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.430697][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.632'. [ 212.510934][ T30] audit: type=1326 audit(1785676758.061:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.5.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb5d19e019 code=0x0 [ 212.519968][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.687132][ T8177] active_anon:21005 inactive_anon:0 isolated_anon:0 [ 212.687132][ T8177] active_file:0 inactive_file:59454 isolated_file:0 [ 212.687132][ T8177] unevictable:768 dirty:328 writeback:0 [ 212.687132][ T8177] slab_reclaimable:12013 slab_unreclaimable:104989 [ 212.687132][ T8177] mapped:41070 shmem:8216 pagetables:1431 [ 212.687132][ T8177] sec_pagetables:0 bounce:0 [ 212.687132][ T8177] kernel_misc_reclaimable:0 [ 212.687132][ T8177] free:1254126 free_pcp:23686 free_cma:0 [ 212.758135][ T8177] Node 0 active_anon:84804kB inactive_anon:0kB active_file:0kB inactive_file:237588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164988kB dirty:1312kB writeback:0kB shmem:31952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13284kB pagetables:5644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.798855][ T8177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.852519][ T8177] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.886176][ T8177] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 212.895970][ T5703] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 212.906175][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.923076][ T8177] Node 0 DMA32 free:1069652kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87504kB inactive_anon:0kB active_file:0kB inactive_file:237588kB unevictable:1536kB writepending:1312kB zspages:0kB present:3129332kB managed:2532108kB mlocked:0kB bounce:0kB free_pcp:78432kB local_pcp:17388kB free_cma:0kB [ 212.930561][ T5703] usb 5-1: Product: syz [ 212.963440][ T5718] usb 1-1: USB disconnect, device number 5 [ 212.977758][ T8177] lowmem_reserve[]: 0 0 0 0 0 [ 212.982682][ T8177] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.040335][ T5703] usb 5-1: Manufacturer: syz [ 213.058530][ T5703] usb 5-1: SerialNumber: syz [ 213.072488][ T8177] lowmem_reserve[]: 0 0 0 0 0 [ 213.090352][ T8177] Node 1 Normal free:3938804kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5860kB local_pcp:0kB free_cma:0kB [ 213.122487][ T8177] lowmem_reserve[]: 0 0 0 0 0 [ 213.127764][ T8177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.145069][ T8177] Node 0 DMA32: 531*4kB (UME) 383*8kB (UME) 442*16kB (UME) 263*32kB (UM) 42*64kB (UME) 27*128kB (UM) 61*256kB (UME) 8*512kB (UM) 15*1024kB (U) 18*2048kB (UM) 237*4096kB (UM) = 1069508kB [ 213.175773][ T8177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.223160][ T8177] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 4*16kB (U) 12*32kB (UM) 4*64kB (UM) 6*128kB (UM) 0*256kB 2*512kB (UM) 4*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938804kB [ 213.484817][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.493883][ T8177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.506612][ T8177] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 213.516908][ T8177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.527162][ T8177] Node 1 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 213.857505][ T8177] 72417 total pagecache pages [ 213.902310][ T8177] 0 pages in swap cache [ 213.917946][ T8177] Free swap = 124996kB [ 213.922674][ T8177] Total swap = 124996kB [ 213.932978][ T8177] 2097051 pages RAM [ 213.954143][ T8177] 0 pages HighMem/MovableOnly [ 213.977597][ T8177] 432315 pages reserved [ 213.985323][ T8177] 0 pages cma reserved [ 214.077803][ T5703] usb 5-1: USB disconnect, device number 24 [ 214.363253][ T30] audit: type=1400 audit(1785676759.911:653): avc: denied { write } for pid=8182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.493736][ T8214] 9p: Bad value for 'rfdno' [ 214.616192][ T8214] syzkaller1: entered promiscuous mode [ 214.663511][ T8214] syzkaller1: entered allmulticast mode [ 214.672667][ T30] audit: type=1400 audit(1785676760.221:654): avc: denied { write } for pid=8217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.712746][ T8223] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 214.822096][ T30] audit: type=1400 audit(1785676760.371:655): avc: denied { create } for pid=8216 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 215.395384][ T8228] bond1: option arp_validate: invalid value (18446744073709551615) [ 215.426600][ T8228] bond1 (unregistering): Released all slaves [ 215.444984][ T8234] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 215.982147][ T30] audit: type=1400 audit(1785676761.531:656): avc: denied { create } for pid=8257 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 216.034845][ T30] audit: type=1400 audit(1785676761.551:657): avc: denied { bind } for pid=8257 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 217.542118][ T30] audit: type=1400 audit(1785676762.901:658): avc: denied { create } for pid=8277 comm="syz.5.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.066398][ T8289] IPv6: addrconf: prefix option has invalid lifetime [ 219.258499][ T5718] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.291741][ T30] audit: type=1400 audit(1785676764.841:659): avc: denied { write } for pid=8299 comm="syz.5.665" name="functions" dev="configfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 219.291868][ T8300] Mass Storage Function, version: 2009/09/11 [ 219.368994][ T8300] LUN: removable file: (no medium) [ 219.548690][ T5719] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 219.701184][ T5719] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 219.724739][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 219.743337][ T5719] usb 5-1: Product: syz [ 219.756949][ T5719] usb 5-1: config 0 descriptor?? [ 219.774629][ T5719] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 219.799212][ T5719] usb 5-1: Detected FT232H [ 219.808616][ T5703] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 219.890733][ T30] audit: type=1400 audit(1785676765.441:660): avc: denied { ioctl } for pid=8278 comm="syz.3.659" path="socket:[20513]" dev="sockfs" ino=20513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.974530][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 220.016239][ T5703] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 48 [ 220.051195][ T5703] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.081838][ T5703] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.103870][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.126807][ T5703] usb 6-1: Product: syz [ 220.133412][ T5703] usb 6-1: Manufacturer: syz [ 220.150161][ T5703] usb 6-1: SerialNumber: syz [ 220.173890][ T5703] usb 6-1: config 0 descriptor?? [ 220.191040][ T8303] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 221.083033][ T5703] gs_usb 6-1:0.0: Configuring for 172 interfaces [ 221.268771][ T5719] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 221.296069][ T5703] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 221.299267][ T5719] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 221.361933][ T5703] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 221.366288][ T5719] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 221.465686][ T5719] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 221.513412][ T5719] usb 5-1: USB disconnect, device number 25 [ 221.710460][ T5719] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 221.737044][ T5719] ftdi_sio 5-1:0.0: device disconnected [ 222.426860][ T8338] kAFS: Can only specify source 'none' with -o dyn [ 222.446795][ T8337] netlink: 120 bytes leftover after parsing attributes in process `syz.4.674'. [ 222.620590][ T4928] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 222.685460][ T8343] PKCS7: Unknown OID: [4] 0.0 [ 222.685821][ T5704] usb 6-1: USB disconnect, device number 13 [ 222.690539][ T8343] PKCS7: Only support pkcs7_signedData type [ 222.818553][ T5719] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 222.828536][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 222.968495][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 222.981535][ T5719] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 223.000475][ T5719] usb 5-1: config 0 has no interface number 0 [ 223.006217][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.008241][ T5719] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.030561][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 223.038489][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.050376][ T24] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 223.054877][ T5719] usb 5-1: Product: syz [ 223.067981][ T5719] usb 5-1: Manufacturer: syz [ 223.070702][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.086196][ T5719] usb 5-1: SerialNumber: syz [ 223.090792][ T24] usb 2-1: config 0 descriptor?? [ 223.103613][ T5719] usb 5-1: config 0 descriptor?? [ 223.136233][ T8354] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 223.142939][ T8354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.157063][ T8354] vhci_hcd vhci_hcd.0: Device attached [ 223.324665][ T24] Bluetooth: Can't get state to change to load ram patch err [ 223.348874][ T24] Bluetooth: Loading patch file failed [ 223.358586][ T24] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 223.388562][ T5726] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 223.447984][ T8357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.531631][ T5719] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 223.557136][ T8357] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 223.563769][ T8357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.572299][ T5719] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 223.599839][ T8366] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 223.606473][ T8366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.645784][ T8357] vhci_hcd vhci_hcd.0: Device attached [ 223.647101][ T24] usb 2-1: USB disconnect, device number 18 [ 223.665116][ T8366] vhci_hcd vhci_hcd.0: Device attached [ 224.014493][ T8367] vhci_hcd: connection closed [ 224.016220][ T8363] vhci_hcd: connection closed [ 224.062982][ T7413] vhci_hcd vhci_hcd.0: stop threads [ 224.226431][ T30] audit: type=1400 audit(1785676769.751:661): avc: denied { nlmsg_read } for pid=8334 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.269514][ T8355] vhci_hcd: connection reset by peer [ 224.271681][ T7413] vhci_hcd vhci_hcd.0: release socket [ 224.286033][ T5719] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.305138][ T5719] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 224.317537][ T5719] usb 5-1: USB disconnect, device number 26 [ 224.323260][ T7413] vhci_hcd vhci_hcd.0: disconnect device [ 224.427113][ T7413] vhci_hcd vhci_hcd.0: stop threads [ 224.515358][ T7413] vhci_hcd vhci_hcd.0: release socket [ 224.550011][ T7413] vhci_hcd vhci_hcd.0: disconnect device [ 224.573674][ T7413] vhci_hcd vhci_hcd.0: stop threads [ 224.579543][ T7413] vhci_hcd vhci_hcd.0: release socket [ 224.587343][ T7413] vhci_hcd vhci_hcd.0: disconnect device [ 227.309609][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 227.384527][ T8394] batman_adv: batadv0: Adding interface: macsec1 [ 227.398695][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.419598][ T8394] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.487655][ T8394] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 227.531647][ T8400] sch_fq: defrate 4294967295 ignored. [ 227.563336][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.575325][ T24] usb 2-1: config 0 has no interface number 0 [ 227.597871][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 227.635644][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.647451][ T24] usb 2-1: Product: syz [ 227.652335][ T24] usb 2-1: Manufacturer: syz [ 227.657476][ T24] usb 2-1: SerialNumber: syz [ 227.696821][ T24] usb 2-1: config 0 descriptor?? [ 227.914838][ T24] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 227.940168][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.957379][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 227.966509][ T24] usb 2-1: media controller created [ 227.992544][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.565864][ T5726] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 228.569012][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 228.575824][ T7415] Bluetooth: (null): Invalid header checksum [ 228.998122][ T7415] Bluetooth: (null): Invalid header checksum [ 229.032927][ T7415] Bluetooth: (null): Invalid header checksum [ 229.054520][ T7415] Bluetooth: (null): Invalid header checksum [ 229.068845][ T7415] Bluetooth: (null): Invalid header checksum [ 229.092464][ T24] usb 2-1: USB disconnect, device number 19 [ 229.095280][ T7415] Bluetooth: (null): Invalid header checksum [ 229.181366][ T8410] Bluetooth: (null): Invalid header checksum [ 229.312844][ T8441] ceph: Unknown parameter 'addr' [ 229.329969][ T8441] netlink: 'syz.1.701': attribute type 61 has an invalid length. [ 229.489299][ T8447] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.573217][ T30] audit: type=1400 audit(1785676775.121:662): avc: denied { setopt } for pid=8444 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.967945][ T30] audit: type=1400 audit(1785676775.151:663): avc: denied { ioctl } for pid=8444 comm="syz.4.702" path="socket:[20809]" dev="sockfs" ino=20809 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.010115][ T8466] rdma_rxe: rxe_newlink: failed to add lo [ 230.578497][ T5726] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 230.755682][ T5726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.775465][ T5726] usb 1-1: config 0 has no interface number 0 [ 230.798709][ T5726] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.822929][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.848599][ T5726] usb 1-1: Product: syz [ 230.859373][ T5726] usb 1-1: Manufacturer: syz [ 230.869782][ T5726] usb 1-1: SerialNumber: syz [ 230.889820][ T5726] usb 1-1: config 0 descriptor?? [ 231.109058][ T8488] xt_hashlimit: size too large, truncated to 1048576 [ 231.118391][ T5726] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.173864][ T5726] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.201440][ T5726] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.225800][ T5726] usb 1-1: media controller created [ 231.277293][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.422596][ T5726] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 231.596237][ T5726] usb 1-1: USB disconnect, device number 7 [ 232.041670][ T30] audit: type=1400 audit(1785676777.591:664): avc: denied { write } for pid=8506 comm="syz.3.719" name="functions" dev="configfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.113731][ T30] audit: type=1400 audit(1785676777.661:665): avc: denied { accept } for pid=8508 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.138835][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.148047][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.212790][ T30] audit: type=1400 audit(1785676777.731:666): avc: denied { write } for pid=8506 comm="syz.3.719" name="extensions" dev="configfs" ino=21635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.428507][ T5719] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 232.558575][ T5719] usb 1-1: device descriptor read/64, error -71 [ 232.808634][ T5719] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 232.958958][ T5719] usb 1-1: device descriptor read/64, error -71 [ 233.062133][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.078837][ T5719] usb usb1-port1: attempt power cycle [ 233.108570][ T5806] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 233.140138][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.268622][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 233.278311][ T5806] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 233.303640][ T5806] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 233.331228][ T5806] usb 5-1: config 0 has no interface number 0 [ 233.349704][ T5806] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.379648][ T5806] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.404493][ T5806] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.428503][ T5719] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 233.439367][ T5806] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 233.453749][ T5806] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 233.466655][ T5719] usb 1-1: device descriptor read/8, error -71 [ 233.483918][ T5806] usb 5-1: Product: syz [ 233.496659][ T5806] usb 5-1: Manufacturer: syz [ 233.518220][ T5806] usb 5-1: config 0 descriptor?? [ 233.708664][ T5719] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 233.749202][ T5719] usb 1-1: device descriptor read/8, error -71 [ 233.833709][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.860671][ T5719] usb usb1-port1: unable to enumerate USB device [ 233.871721][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.889088][ T30] audit: type=1400 audit(1785676779.431:667): avc: denied { set_context_mgr } for pid=8522 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.912494][ T8528] binder: 8522:8528 ioctl c0306201 200000000040 returned -14 [ 233.924972][ T8528] binder: 8522:8528 ioctl c0306201 200000000640 returned -22 [ 233.932835][ T30] audit: type=1400 audit(1785676779.461:668): avc: denied { write } for pid=8522 comm="syz.4.723" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 234.248587][ T5719] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 234.388369][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.398206][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.439478][ T5719] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 234.462724][ T5719] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 234.480624][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.487515][ T5719] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 234.531628][ T8528] tipc: Enabling of bearer rejected, failed to enable media [ 234.549212][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.574405][ T5719] usb 2-1: config 0 descriptor?? [ 234.589028][ T8410] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.640218][ T8410] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.652092][ T5806] usb 5-1: USB disconnect, device number 27 [ 234.684722][ T8410] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.743864][ T8537] ceph: Unknown parameter 'addr' [ 234.768997][ T8411] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.783840][ T8537] netlink: 'syz.3.726': attribute type 61 has an invalid length. [ 234.911543][ T8535] syzkaller0: entered promiscuous mode [ 234.923044][ T8535] syzkaller0: entered allmulticast mode [ 235.108316][ T5719] usbhid 2-1:0.0: can't add hid device: -71 [ 235.137948][ T5719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 235.186371][ T5719] usb 2-1: USB disconnect, device number 20 [ 235.203850][ T30] audit: type=1400 audit(1785676780.741:669): avc: denied { write } for pid=8539 comm="syz.0.727" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 235.608766][ T8544] rdma_rxe: rxe_newlink: failed to add lo [ 235.709134][ T8547] input: syz1 as /devices/virtual/input/input26 [ 236.010849][ T30] audit: type=1400 audit(1785676781.471:670): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3219 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.531830][ T30] audit: type=1400 audit(1785676781.511:671): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3219 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.625189][ T30] audit: type=1400 audit(1785676781.671:672): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3219 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.851046][ T5719] IPVS: starting estimator thread 0... [ 236.867393][ T8540] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 236.898848][ T8540] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 236.988605][ T8553] IPVS: using max 55 ests per chain, 132000 per kthread [ 237.978992][ T30] audit: type=1326 audit(1785676783.521:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.061635][ T30] audit: type=1326 audit(1785676783.521:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.107012][ T8568] trusted_key: encrypted_key: insufficient parameters specified [ 238.173275][ T30] audit: type=1326 audit(1785676783.521:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.268529][ T30] audit: type=1326 audit(1785676783.521:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.378577][ T30] audit: type=1326 audit(1785676783.521:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.465326][ T8574] netlink: 5164 bytes leftover after parsing attributes in process `syz.3.735'. [ 238.506733][ T30] audit: type=1326 audit(1785676783.521:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6779e019 code=0x7ffc0000 [ 238.699130][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e77cc00: rx timeout, send abort [ 239.203861][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880548dc000: rx timeout, send abort [ 239.212303][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e77cc00: abort rx timeout. Force session deactivation [ 239.414354][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 239.717731][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880548dc000: abort rx timeout. Force session deactivation [ 239.809005][ T1237] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.010916][ T1237] usb 1-1: Using ep0 maxpacket: 32 [ 240.093277][ T1237] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 240.126297][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.138490][ T1237] usb 1-1: Product: syz [ 240.158584][ T1237] usb 1-1: Manufacturer: syz [ 240.178509][ T1237] usb 1-1: SerialNumber: syz [ 240.201341][ T1237] usb 1-1: config 0 descriptor?? [ 240.450123][ T1237] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 012 [ 242.873137][ T8590] i2c i2c-1: failure sending STOP [ 243.695634][ T8608] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 243.829292][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 243.829302][ T30] audit: type=1400 audit(1785676789.381:767): avc: denied { write } for pid=8607 comm="syz.4.743" name="context-info" dev="tracefs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 243.861667][ T8608] nfs4: Unknown parameter '@/@' [ 243.940654][ T5719] usb 1-1: USB disconnect, device number 12 [ 243.987245][ T30] audit: type=1400 audit(1785676789.411:768): avc: denied { mounton } for pid=8607 comm="syz.4.743" path="/126/debug/tracing/options/context-info" dev="tracefs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 244.213454][ T30] audit: type=1400 audit(1785676789.421:769): avc: denied { open } for pid=8607 comm="syz.4.743" path="/126/debug/tracing/options/context-info" dev="tracefs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 244.332206][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 244.401208][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 244.473864][ T30] audit: type=1400 audit(1785676790.021:770): avc: denied { write } for pid=8615 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 244.715527][ T30] audit: type=1800 audit(1785676790.101:771): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.747" name="UDC" dev="configfs" ino=21132 res=0 errno=0 [ 244.806508][ T30] audit: type=1400 audit(1785676790.221:772): avc: denied { write } for pid=8615 comm="syz.0.747" name="c.1" dev="configfs" ino=10101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.838635][ T5719] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 244.910054][ T30] audit: type=1400 audit(1785676790.221:773): avc: denied { write } for pid=8615 comm="syz.0.747" name="c.1" dev="configfs" ino=10101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 245.041272][ T5719] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 245.098306][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 245.145211][ T5719] usb 6-1: Product: syz [ 245.165658][ T5719] usb 6-1: SerialNumber: syz [ 245.212647][ T5719] usb 6-1: config 0 descriptor?? [ 245.466461][ T5719] hso 6-1:0.0: Failed to find INT IN ep [ 245.785037][ T5719] usb 6-1: USB disconnect, device number 14 [ 246.394922][ T30] audit: type=1400 audit(1785676791.941:774): avc: denied { write } for pid=8640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.531409][ T30] audit: type=1400 audit(1785676792.081:775): avc: denied { create } for pid=8669 comm="syz.5.757" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.572326][ T8672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.673848][ T30] audit: type=1400 audit(1785676792.221:776): avc: denied { write } for pid=8669 comm="syz.5.757" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.717304][ T8664] all (unregistering): Released all slaves [ 247.929307][ T186] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 248.054687][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.169975][ T186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.198782][ T186] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 248.228857][ T186] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 248.258690][ T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.286328][ T186] usb 5-1: config 0 descriptor?? [ 248.879872][ T186] Bluetooth: Can't get state to change to load ram patch err [ 248.896249][ T186] Bluetooth: Loading patch file failed [ 248.919949][ T186] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 249.214223][ T186] usb 5-1: USB disconnect, device number 28 [ 249.644916][ T8702] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 250.464421][ T4928] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.471249][ T8690] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 250.590914][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 250.590946][ T30] audit: type=1400 audit(1785676796.141:783): avc: denied { connect } for pid=8722 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 251.251357][ T8690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.280411][ T8690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.299425][ T8690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.318831][ T8690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.337176][ T8690] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 251.350124][ T8690] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 251.366590][ T8690] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 251.563592][ T30] audit: type=1400 audit(1785676797.111:784): avc: denied { read } for pid=8738 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.678735][ T5718] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 251.686640][ T186] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 251.876966][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.892709][ T186] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 251.949550][ T186] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 251.963698][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.008303][ T5718] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 252.032028][ T186] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.053916][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 252.090685][ T186] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 252.170271][ T5718] usb 2-1: SerialNumber: syz [ 252.202653][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.279324][ T186] usb 6-1: config 0 descriptor?? [ 252.286948][ T5718] usb 2-1: can't set config #1, error -71 [ 252.331398][ T5718] usb 2-1: USB disconnect, device number 21 [ 252.432747][ T186] usbhid 6-1:0.0: can't add hid device: -71 [ 252.460652][ T186] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 252.515472][ T186] usb 6-1: USB disconnect, device number 15 [ 252.549183][ T4928] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.009951][ T8499] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 253.088503][ T186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 253.438646][ T30] audit: type=1400 audit(1785676798.651:785): avc: denied { write } for pid=8755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.462966][ T4928] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.463039][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.463073][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.529799][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 253.588846][ T186] usb 6-1: Using ep0 maxpacket: 8 [ 253.608169][ T186] usb 6-1: config 0 has no interfaces? [ 253.616251][ T186] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 253.630378][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.645017][ T8499] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.648512][ T186] usb 6-1: Product: syz [ 253.675713][ T186] usb 6-1: Manufacturer: syz [ 253.680643][ T186] usb 6-1: SerialNumber: syz [ 253.685779][ T8750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.693057][ T8750] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 253.702779][ T186] usb 6-1: config 0 descriptor?? [ 253.706159][ T8499] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 253.740282][ T8499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 253.742173][ T8750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.775165][ T30] audit: type=1400 audit(1785676799.321:786): avc: denied { write } for pid=8780 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.803028][ T8499] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.804555][ T8750] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 253.847636][ T8499] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 253.872168][ T8499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.892399][ T8499] usb 5-1: Product: syz [ 253.902465][ T8750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.915456][ T8499] usb 5-1: Manufacturer: syz [ 253.922434][ T8750] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 253.929229][ T8499] usb 5-1: SerialNumber: syz [ 253.958168][ T8499] usb 5-1: config 0 descriptor?? [ 253.976360][ T8750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.995906][ T8499] xbox_remote_probe: Unexpected endpoint_in [ 254.013585][ T8750] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 254.086200][ T8750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.109413][ T8750] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 254.200317][ T8499] usb 5-1: USB disconnect, device number 29 [ 254.506642][ T5806] usb 6-1: USB disconnect, device number 16 [ 254.717943][ T8750] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 254.741097][ T8750] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 254.840263][ T30] audit: type=1400 audit(1785676800.391:787): avc: denied { write } for pid=8784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.874835][ T30] audit: type=1400 audit(1785676800.421:788): avc: denied { create } for pid=8801 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.240629][ T186] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 255.421975][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.570578][ T186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.625580][ T186] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 255.655044][ T30] audit: type=1400 audit(1785676801.201:789): avc: denied { write } for pid=8809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.689603][ T186] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 255.735632][ T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.782602][ T186] usb 5-1: config 0 descriptor?? [ 256.021521][ T186] Bluetooth: Can't get state to change to load ram patch err [ 256.042367][ T186] Bluetooth: Loading patch file failed [ 256.061773][ T186] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 256.198735][ T30] audit: type=1400 audit(1785676801.741:790): avc: denied { write } for pid=8820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.330477][ T30] audit: type=1400 audit(1785676801.871:791): avc: denied { write } for pid=8836 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.920123][ T186] usb 5-1: USB disconnect, device number 30 [ 256.937180][ T8815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 256.982976][ T8815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 257.181516][ T8856] ceph: Unknown parameter 'addr' [ 257.197345][ T8856] netlink: 'syz.5.803': attribute type 61 has an invalid length. [ 257.207529][ T30] audit: type=1400 audit(1785676802.751:792): avc: denied { ioctl } for pid=8857 comm="syz.0.804" path="/156/tracefs_dir/buffer_size_kb" dev="tracefs" ino=119 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 257.258565][ T5809] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 257.294562][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb3f000: rx timeout, send abort [ 257.428224][ T30] audit: type=1400 audit(1785676802.971:793): avc: denied { write } for pid=8845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.458611][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 257.494755][ T5809] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 257.513731][ T8867] rdma_rxe: rxe_newlink: failed to add lo [ 257.528768][ T5809] usb 2-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 257.554042][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.688449][ T30] audit: type=1400 audit(1785676803.231:794): avc: denied { write } for pid=8868 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.715129][ T5809] usb 2-1: Product: syz [ 257.771819][ T5809] usb 2-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 257.803077][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054bb6000: rx timeout, send abort [ 257.811752][ T5809] usb 2-1: SerialNumber: syz [ 257.817631][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eb3f000: abort rx timeout. Force session deactivation [ 258.061189][ T30] audit: type=1400 audit(1785676803.611:795): avc: denied { create } for pid=8877 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.114072][ T30] audit: type=1400 audit(1785676803.641:796): avc: denied { setopt } for pid=8877 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.303162][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054bb6000: abort rx timeout. Force session deactivation [ 258.774640][ T5809] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 258.790367][ T5809] usb 2-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 258.800885][ T5809] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 258.819997][ T5809] usb 2-1: 2:1 : invalid channels 0 [ 258.886612][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.809'. [ 258.930204][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 258.989323][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.809'. [ 259.069989][ T5809] usb 2-1: USB disconnect, device number 22 [ 259.163321][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.432601][ T30] audit: type=1400 audit(1785676804.981:797): avc: denied { getopt } for pid=8904 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.693615][ T8913] overlay: ./file0 is not a directory [ 259.719079][ T5809] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.834589][ T30] audit: type=1400 audit(1785676805.381:798): avc: denied { write } for pid=8884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.933352][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.958456][ T5809] usb 1-1: config 0 has no interface number 0 [ 259.971034][ T5809] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 259.994466][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.120507][ T5809] usb 1-1: Product: syz [ 260.176840][ T5809] usb 1-1: Manufacturer: syz [ 260.233034][ T5809] usb 1-1: SerialNumber: syz [ 260.387949][ T186] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 260.494400][ T5809] usb 1-1: config 0 descriptor?? [ 260.618851][ T186] usb 2-1: Using ep0 maxpacket: 32 [ 260.625705][ T186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.646995][ T186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.685349][ T186] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.712931][ T186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.734070][ T5809] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 260.761963][ T5809] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.771763][ T186] usb 2-1: config 0 descriptor?? [ 260.806304][ T186] hub 2-1:0.0: USB hub found [ 260.810063][ T5809] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 260.833479][ T5809] usb 1-1: media controller created [ 260.875260][ T5719] hsr0: entered promiscuous mode [ 260.888506][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.960663][ T5809] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 261.007423][ T8920] tc_dump_action: action bad kind [ 261.021152][ T186] hub 2-1:0.0: 10 ports detected [ 261.032808][ T186] hub 2-1:0.0: insufficient power available to use all downstream ports [ 261.058505][ T5806] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 261.084596][ T5809] usb 1-1: USB disconnect, device number 13 [ 261.113905][ T8937] gadgetfs: bound to dummy_udc driver [ 261.272897][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 261.272925][ T30] audit: type=1400 audit(1785676806.821:800): avc: denied { open } for pid=8919 comm="syz.1.817" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.307108][ T5806] usb 6-1: device descriptor read/64, error -71 [ 261.386205][ T30] audit: type=1400 audit(1785676806.851:801): avc: denied { ioctl } for pid=8919 comm="syz.1.817" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.470015][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 261.498735][ T5809] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 261.528267][ C1] gadgetfs: connected [ 261.534091][ T5809] gadgetfs: disconnected [ 261.555649][ T30] audit: type=1400 audit(1785676806.981:802): avc: denied { getopt } for pid=8936 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.673200][ T186] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 261.691677][ T186] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 261.709400][ C1] gadgetfs: connected [ 261.715789][ T186] usbhid 2-1:0.0: can't add hid device: -71 [ 261.716937][ T5809] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 261.732126][ T186] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.741255][ T5809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 261.743890][ T5806] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 261.751438][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.785064][ C1] gadgetfs: configuration #1 [ 261.792784][ T186] usb 2-1: USB disconnect, device number 23 [ 261.814226][ T30] audit: type=1400 audit(1785676807.361:803): avc: denied { write } for pid=8927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.899038][ T8936] gadgetfs: suspended from state 3 [ 261.905161][ T8936] gadgetfs: disconnected [ 261.911148][ T5806] usb 6-1: device descriptor read/64, error -71 [ 261.917445][ T5809] usb 1-1: USB disconnect, device number 14 [ 261.988041][ T30] audit: type=1400 audit(1785676807.531:804): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 262.112579][ T5806] usb usb6-port1: attempt power cycle [ 262.121382][ T30] audit: type=1400 audit(1785676807.641:805): avc: denied { write } for pid=8956 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.488767][ T5806] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 262.519078][ T5806] usb 6-1: device descriptor read/8, error -71 [ 262.633541][ T8964] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 262.642523][ T186] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 262.651965][ T8964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.705491][ T8975] ceph: Unknown parameter 'addr' [ 262.714666][ T8975] netlink: 'syz.3.828': attribute type 61 has an invalid length. [ 262.758628][ T29] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 262.837281][ T5806] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 262.859377][ T5806] usb 6-1: device descriptor read/8, error -71 [ 262.918478][ T186] usb 2-1: Using ep0 maxpacket: 16 [ 262.925010][ T186] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.936302][ T186] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.943310][ T8976] rdma_rxe: rxe_newlink: failed to add lo [ 262.949225][ T186] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 262.958566][ T5719] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 262.984377][ T5806] usb usb6-port1: unable to enumerate USB device [ 262.992188][ T186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.015129][ T186] usb 2-1: config 0 descriptor?? [ 263.064227][ T29] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 263.073613][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.086547][ T29] usb 1-1: config 0 has no interface number 0 [ 263.096382][ T29] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.122237][ T29] usb 1-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.135292][ T29] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 263.149765][ T29] usb 1-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 263.162580][ T29] usb 1-1: config 0 interface 244 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 263.177706][ T29] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 263.188361][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.206090][ T29] usb 1-1: config 0 descriptor?? [ 263.338671][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 263.354486][ T5719] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 203, changing to 7 [ 263.385053][ T5719] usb 5-1: New USB device found, idVendor=0e41, idProduct=5044, bcdDevice= 0.40 [ 263.408477][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.424531][ T5719] usb 5-1: Product: syz [ 263.433509][ T29] usb 1-1: string descriptor 0 read error: -71 [ 263.438467][ T5719] usb 5-1: Manufacturer: ﱆ籡쯰䁏茊妈旈럗熨䊇꽽ﾂ貯w䜮ﮮ뀯粫蝆粭銱㈳ဨ➀ᦅ锿햭짚뢅㺨梄᳍Ṹ덍˂굠仒뙷Ϩ픖ᠧ뾱䴢뛴埏껚蜻ᛢꕊ믙殮煕䂠୺⪫랣胤鐖苽ۛ⭖툛ኣ鳁ḅꭷꨠ\䈫卟鏬諭ꅛ톩ꀗ릵껶㏖ᒌꚇ뜀绒㮼å [ 263.507498][ T29] cypress_m8 1-1:0.244: DeLorme Earthmate USB converter detected [ 263.531086][ T29] earthmate ttyUSB0: required endpoint is missing [ 263.545517][ T5719] usb 5-1: SerialNumber: syz [ 263.561222][ T186] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 263.657106][ T29] usb 1-1: USB disconnect, device number 15 [ 263.665235][ T29] cypress_m8 1-1:0.244: device disconnected [ 263.862393][ T5719] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 263.881994][ T5719] usb 5-1: 1:1 : unsupported sample bitwidth 12 in 138 bytes [ 263.890304][ T5719] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 263.896455][ T5719] usb 5-1: 2:1 : invalid channels 0 [ 263.947441][ T5719] usb 5-1: USB disconnect, device number 31 [ 264.501745][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.616395][ T29] usb 2-1: USB disconnect, device number 24 [ 264.818486][ T30] audit: type=1400 audit(1785676810.351:806): avc: denied { getopt } for pid=8998 comm="syz.3.836" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.899770][ T30] audit: type=1400 audit(1785676810.411:807): avc: denied { setopt } for pid=9000 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.410289][ T30] audit: type=1400 audit(1785676810.961:808): avc: denied { setopt } for pid=9029 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.465932][ T9036] netlink: 64 bytes leftover after parsing attributes in process `syz.4.843'. [ 265.468514][ T30] audit: type=1400 audit(1785676810.981:809): avc: denied { ioctl } for pid=9029 comm="syz.1.845" path="socket:[23995]" dev="sockfs" ino=23995 ioctlcmd=0x6e80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.485637][ T9032] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 266.665262][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 266.665278][ T30] audit: type=1400 audit(1785676812.211:811): avc: denied { accept } for pid=9059 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 266.956704][ T9078] binder: 9076:9078 ioctl c00c6211 200000000840 returned -14 [ 267.134322][ T9078] binder: 9076:9078 ioctl c0306201 200000000640 returned -14 [ 267.265586][ T9085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9085 comm=syz.0.856 [ 267.318739][ T30] audit: type=1400 audit(1785676812.831:812): avc: denied { getopt } for pid=9079 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.478947][ T9086] tipc: Enabling of bearer rejected, failed to enable media [ 267.664941][ T9066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 267.717214][ T9066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.989054][ T5809] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 268.257833][ T5809] usb 6-1: Invalid ep0 maxpacket: 64 [ 268.549964][ T5809] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 268.728558][ T5809] usb 6-1: Invalid ep0 maxpacket: 64 [ 268.804120][ T5809] usb usb6-port1: attempt power cycle [ 268.865016][ T9109] ceph: Unknown parameter 'addr' [ 268.896612][ T9109] netlink: 'syz.0.865': attribute type 61 has an invalid length. [ 269.113009][ T9111] rdma_rxe: rxe_newlink: failed to add lo [ 269.194723][ T5809] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 269.241876][ T5809] usb 6-1: Invalid ep0 maxpacket: 64 [ 269.411398][ T5809] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 269.470634][ T5809] usb 6-1: Invalid ep0 maxpacket: 64 [ 269.487212][ T5809] usb usb6-port1: unable to enumerate USB device [ 270.018993][ T9123] overlayfs: failed to resolve './file1/file0': -2 [ 270.039220][ T30] audit: type=1400 audit(1785676815.591:813): avc: denied { getopt } for pid=9122 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.167323][ T9150] ceph: Unknown parameter 'addr' [ 272.197320][ T9150] netlink: 'syz.4.879': attribute type 61 has an invalid length. [ 272.381974][ T9155] rdma_rxe: rxe_newlink: failed to add lo [ 273.149419][ T9135] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.171529][ T9135] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.475396][ T9167] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 273.557938][ T30] audit: type=1400 audit(1785676819.021:814): avc: denied { getopt } for pid=9165 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.408362][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 379.415331][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9047/1:b..l [ 379.423703][ C0] rcu: (detected by 0, t=10502 jiffies, g=39033, q=440 ncpus=2) [ 379.431415][ C0] task:syz.1.848 state:R running task stack:26184 pid:9047 tgid:9044 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 379.445391][ C0] Call Trace: [ 379.448669][ C0] [ 379.451595][ C0] __schedule+0x125c/0x6730 [ 379.456113][ C0] ? __pfx___schedule+0x10/0x10 [ 379.460959][ C0] ? mark_held_locks+0x40/0x70 [ 379.465716][ C0] preempt_schedule_irq+0x50/0x90 [ 379.470733][ C0] irqentry_exit+0x205/0xa00 [ 379.475329][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.481300][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 379.486490][ C0] Code: 05 3b 8d 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 94 3c 0f 0f 82 ac 02 00 00 8b 35 8e c8 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 8c 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 379.506118][ C0] RSP: 0018:ffffc9000369ef28 EFLAGS: 00000206 [ 379.512191][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 379.520237][ C0] RDX: 0000000000000000 RSI: ffffffff8e182264 RDI: ffffffff8c402680 [ 379.528198][ C0] RBP: ffffffff8ebe8200 R08: 00000000d4ddbe60 R09: 0000000000000007 [ 379.536155][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 379.544129][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.552104][ C0] ? unwind_next_frame+0x3be/0x2090 [ 379.557294][ C0] ? unwind_next_frame+0x3be/0x2090 [ 379.562482][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.568712][ C0] unwind_next_frame+0xd1/0x2090 [ 379.573652][ C0] ? unwind_next_frame+0xbd/0x2090 [ 379.578751][ C0] ? drop_caches_sysctl_handler+0xeb/0x120 [ 379.584556][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.590702][ C0] arch_stack_walk+0x94/0xf0 [ 379.595305][ C0] ? drop_caches_sysctl_handler+0xeb/0x120 [ 379.601120][ C0] stack_trace_save+0x8e/0xc0 [ 379.605788][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 379.611150][ C0] ? __lock_acquire+0x49f/0x1a40 [ 379.616082][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 379.621272][ C0] save_stack+0x162/0x1e0 [ 379.625596][ C0] ? __pfx_save_stack+0x10/0x10 [ 379.630452][ C0] ? free_unref_folios+0xa44/0x1710 [ 379.635641][ C0] ? folios_put_refs+0x585/0xaa0 [ 379.640574][ C0] ? mapping_try_invalidate+0x2ff/0x3c0 [ 379.646109][ C0] ? drop_pagecache_sb+0x12e/0x3d0 [ 379.651216][ C0] ? __iterate_supers+0x210/0x330 [ 379.656236][ C0] ? drop_caches_sysctl_handler+0xeb/0x120 [ 379.662040][ C0] ? page_ext_put+0x3e/0xd0 [ 379.666540][ C0] __reset_page_owner+0x84/0x190 [ 379.671472][ C0] free_unref_folios+0xa44/0x1710 [ 379.676490][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 379.682378][ C0] folios_put_refs+0x585/0xaa0 [ 379.687142][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 379.692427][ C0] ? remove_mapping+0x3b/0x250 [ 379.697192][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 379.703520][ C0] mapping_try_invalidate+0x2ff/0x3c0 [ 379.708886][ C0] ? __pfx_mapping_try_invalidate+0x10/0x10 [ 379.714772][ C0] ? find_held_lock+0x2b/0x80 [ 379.719458][ C0] ? mark_held_locks+0x40/0x70 [ 379.724234][ C0] ? find_held_lock+0x2b/0x80 [ 379.728898][ C0] ? drop_pagecache_sb+0x10b/0x3d0 [ 379.734002][ C0] ? drop_pagecache_sb+0x10b/0x3d0 [ 379.739116][ C0] drop_pagecache_sb+0x12e/0x3d0 [ 379.744055][ C0] __iterate_supers+0x210/0x330 [ 379.748901][ C0] ? __pfx_drop_pagecache_sb+0x10/0x10 [ 379.754357][ C0] drop_caches_sysctl_handler+0xeb/0x120 [ 379.759985][ C0] proc_sys_call_handler+0x47f/0x5a0 [ 379.765265][ C0] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 379.771062][ C0] ? splice_from_pipe_next+0x1ec/0x5a0 [ 379.776604][ C0] iter_file_splice_write+0x830/0x10b0 [ 379.782070][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 379.787958][ C0] ? irqentry_exit+0x24d/0xa00 [ 379.792721][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 379.797947][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 379.803832][ C0] direct_splice_actor+0x192/0x690 [ 379.808938][ C0] splice_direct_to_actor+0x345/0xa30 [ 379.814302][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 379.819940][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 379.825832][ C0] do_splice_direct+0x174/0x240 [ 379.830771][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 379.836131][ C0] ? avc_policy_seqno+0x9/0x20 [ 379.840888][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 379.846777][ C0] ? rw_verify_area+0xce/0x6d0 [ 379.851540][ C0] do_sendfile+0xadc/0xe20 [ 379.855957][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 379.860901][ C0] __x64_sys_sendfile64+0x154/0x220 [ 379.866091][ C0] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 379.872329][ C0] do_syscall_64+0x115/0x870 [ 379.876909][ C0] ? clear_bhb_loop+0x40/0x90 [ 379.881580][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.887488][ C0] RIP: 0033:0x7f4ae9f9e019 [ 379.891890][ C0] RSP: 002b:00007f4aeaea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 379.900290][ C0] RAX: ffffffffffffffda RBX: 00007f4aea226090 RCX: 00007f4ae9f9e019 [ 379.908335][ C0] RDX: 0000200000002080 RSI: 0000000000000006 RDI: 0000000000000007 [ 379.916291][ C0] RBP: 00007f4aea03500c R08: 0000000000000000 R09: 0000000000000000 [ 379.924248][ C0] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 379.932205][ C0] R13: 00007f4aea226128 R14: 00007f4aea226090 R15: 00007ffd38978c68 [ 379.940177][ C0] [ 379.943197][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g39033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 379.955523][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=16838 [ 379.963391][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g39033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 379.974741][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 379.984692][ C0] rcu: RCU grace-period kthread stack dump: [ 379.990563][ C0] task:rcu_preempt state:I stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 380.002477][ C0] Call Trace: [ 380.005741][ C0] [ 380.008664][ C0] __schedule+0x125c/0x6730 [ 380.013174][ C0] ? __pfx___schedule+0x10/0x10 [ 380.018015][ C0] ? find_held_lock+0x2b/0x80 [ 380.022680][ C0] ? schedule+0x225/0x2c0 [ 380.027003][ C0] schedule+0xdd/0x2c0 [ 380.031077][ C0] schedule_timeout+0x127/0x280 [ 380.035926][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 380.041294][ C0] ? __pfx_process_timeout+0x10/0x10 [ 380.046574][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 380.052371][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 380.057826][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 380.062580][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 380.067861][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 380.072794][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 380.078068][ C0] ? rcu_is_watching+0x12/0xc0 [ 380.082840][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 380.088644][ C0] rcu_gp_kthread+0x179/0x230 [ 380.093313][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.098500][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 380.104311][ C0] ? __kthread_parkme+0x18c/0x230 [ 380.109353][ C0] ? kthread+0x13a/0x450 [ 380.113582][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.118769][ C0] kthread+0x370/0x450 [ 380.122825][ C0] ? __pfx_kthread+0x10/0x10 [ 380.127405][ C0] ret_from_fork+0x72b/0xd50 [ 380.132004][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 380.137110][ C0] ? __switch_to+0x800/0x10f0 [ 380.141791][ C0] ? __pfx_kthread+0x10/0x10 [ 380.146375][ C0] ret_from_fork_asm+0x1a/0x30 [ 380.151151][ C0] [ 380.154157][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 380.160460][ C0] Sending NMI from CPU 0 to CPUs 1: [ 380.165653][ C1] NMI backtrace for cpu 1 [ 380.165667][ C1] CPU: 1 UID: 0 PID: 9179 Comm: syz.5.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.165686][ C1] Tainted: [L]=SOFTLOCKUP [ 380.165691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 380.165698][ C1] RIP: 0010:check_preemption_disabled+0x1a/0xe0 [ 380.165718][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 a5 a8 08 65 f7 05 c6 a5 a8 08 ff ff ff 7f <74> 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 [ 380.165731][ C1] RSP: 0018:ffffc90000a08de8 EFLAGS: 00000002 [ 380.165742][ C1] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 0000000000000001 [ 380.165750][ C1] RDX: 0000000000000000 RSI: ffffffff8e29e652 RDI: ffffffff8c402680 [ 380.165759][ C1] RBP: ffff8880472a2540 R08: 0000000000000005 R09: 0000000000000000 [ 380.165768][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 380.165776][ C1] R13: 0000000000000046 R14: 0000000000000001 R15: 0000000000000000 [ 380.165785][ C1] FS: 00007feb5e05c6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 380.165799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.165808][ C1] CR2: 00007feb5e03aff8 CR3: 00000000753b4000 CR4: 00000000003526f0 [ 380.165817][ C1] Call Trace: [ 380.165823][ C1] [ 380.165829][ C1] lock_is_held_type+0x60/0x140 [ 380.165846][ C1] __remove_hrtimer+0x374/0x440 [ 380.165867][ C1] __hrtimer_run_queues+0x352/0x9c0 [ 380.165890][ C1] hrtimer_interrupt+0x3e5/0x940 [ 380.165907][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 380.165928][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 380.165950][ C1] [ 380.165954][ C1] [ 380.165959][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.165975][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 380.165991][ C1] Code: f3 0f 1e fa 65 8b 05 45 1e 5a 12 48 8b 34 24 65 48 8b 15 21 1e 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 d1 a0 b4 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 [ 380.166003][ C1] RSP: 0018:ffffc9000567f9f8 EFLAGS: 00000293 [ 380.166014][ C1] RAX: 0000000000000000 RBX: ffffffff8c370cc0 RCX: ffffffff84dd6884 [ 380.166023][ C1] RDX: ffff8880472a2540 RSI: ffffffff84dfab1a RDI: ffffc9000567fc90 [ 380.166032][ C1] RBP: ffffc9000567fc28 R08: 0000000000000001 R09: 0000000000000003 [ 380.166040][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000567fc90 [ 380.166049][ C1] R13: ffffc9000567fc90 R14: 0000000000000001 R15: 0000000000000001 [ 380.166060][ C1] ? tomoyo_supervisor+0x2f4/0x1340 [ 380.166075][ C1] ? tomoyo_domain_quota_is_ok+0x1a/0x580 [ 380.166096][ C1] ? tomoyo_write_log2+0x17a/0xbc0 [ 380.166108][ C1] tomoyo_domain_quota_is_ok+0x1a/0x580 [ 380.166127][ C1] tomoyo_supervisor+0x4b0/0x1340 [ 380.166144][ C1] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 380.166164][ C1] ? tomoyo_realpath_from_path+0x19c/0x690 [ 380.166178][ C1] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 380.166200][ C1] tomoyo_path_number_perm+0x445/0x580 [ 380.166219][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.166238][ C1] ? __pfx_futex_wait+0x10/0x10 [ 380.166259][ C1] ? find_held_lock+0x2b/0x80 [ 380.166271][ C1] ? __fget_files+0x215/0x3d0 [ 380.166284][ C1] ? hook_file_ioctl_common+0x140/0x440 [ 380.166301][ C1] ? __fget_files+0x21f/0x3d0 [ 380.166316][ C1] security_file_ioctl+0xd3/0x230 [ 380.166337][ C1] __x64_sys_ioctl+0xb7/0x210 [ 380.166357][ C1] do_syscall_64+0x115/0x870 [ 380.166372][ C1] ? clear_bhb_loop+0x40/0x90 [ 380.166387][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.166400][ C1] RIP: 0033:0x7feb5d19e019 [ 380.166411][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.166423][ C1] RSP: 002b:00007feb5e05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.166435][ C1] RAX: ffffffffffffffda RBX: 00007feb5d425fa0 RCX: 00007feb5d19e019 [ 380.166444][ C1] RDX: 0000200000000200 RSI: 00000000c03064b7 RDI: 0000000000000004 [ 380.166453][ C1] RBP: 00007feb5d23500c R08: 0000000000000000 R09: 0000000000000000 [ 380.166461][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.166470][ C1] R13: 00007feb5d426038 R14: 00007feb5d425fa0 R15: 00007fff2d06ba18 [ 380.166484][ C1]